PT-2009-2129 · Simple Machines · Simple Machines Forum

~Elmysterio · Published 2009-04-07 · Updated 2017-09-29 · CVE-2008-6659

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Simple Machines Forum (SMF) versions 1.0 through 1.0.14 Simple Machines Forum (SMF) versions 1.1 through 1.1.6

Description The issue allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme dir field during a jsoption action. This is related to Sources/QueryString.php and Sources/Themes.php. For example, a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php can be executed.

Recommendations For Simple Machines Forum (SMF) versions 1.0 through 1.0.14, update to version 1.0.15 or later. For Simple Machines Forum (SMF) versions 1.1 through 1.1.6, update to version 1.1.7 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-6659

Affected Products

Simple Machines Forum

References · 6

• 🔥 https://exploit-db.com/exploits/7011 · Exploit
• 🔥 http://securityfocus.com/bid/32139 · Exploit
• http://simplemachines.org/community/index.php?topic=272861.0 · Vendor Advisory
• http://secunia.com/advisories/32516 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6659 · Security Note
• http://osvdb.org/50072 · Note