PT-2007-6876 · Simple Machines · Simple Machines Forum

Publicado 2007-11-14 · Atualizado 2018-10-15 · CVE-2007-5943

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Machines Forum (SMF) version 1.1.4

Description The issue allows remote attackers to read messages in private forums. This is achieved by utilizing the advanced search module with the "show results as messages" option and then searching for possible keywords contained in the message.

Recommendations For Simple Machines Forum (SMF) version 1.1.4, consider disabling the advanced search module or restricting access to it until a fix is available. Additionally, limit the use of the "show results as messages" option to prevent unauthorized access to private messages.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2007-5943

Produtos afetados

Simple Machines Forum

Referências · 3

• http://securityfocus.com/archive/1/483437/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5943 · Nota de Segurança
• http://securityfocus.com/bid/26508 · Nota