PT-2007-6876 · Simple Machines · Simple Machines Forum

Published 2007-11-14 · Updated 2018-10-15 · CVE-2007-5943

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Machines Forum (SMF) version 1.1.4

Description The issue allows remote attackers to read messages in private forums. This is achieved by utilizing the advanced search module with the "show results as messages" option and then searching for possible keywords contained in the message.

Recommendations For Simple Machines Forum (SMF) version 1.1.4, consider disabling the advanced search module or restricting access to it until a fix is available. Additionally, limit the use of the "show results as messages" option to prevent unauthorized access to private messages.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-5943

Affected Products

Simple Machines Forum

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-5943 · Security Note
• http://securityfocus.com/archive/1/483437/100/0/threaded · Note
• http://securityfocus.com/bid/26508 · Note