Simple Machines Forum 'SSI.php' Security Bypass Vulnerability
BID:46508
Info
Simple Machines Forum 'SSI.php' Security Bypass Vulnerability
| Bugtraq ID: | 46508 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2011 12:00AM |
| Updated: | Feb 11 2011 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Simple Machines Simple Machines Forum 1.1.12 |
| Not Vulnerable: |
Simple Machines Simple Machines Forum 1.1.13 |
Discussion
Simple Machines Forum 'SSI.php' Security Bypass Vulnerability
Simple Machines Forum is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Simple Machines Forum 1.1.12 is affected; prior versions may also be vulnerable.
Simple Machines Forum is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Simple Machines Forum 1.1.12 is affected; prior versions may also be vulnerable.
Exploit / POC
Simple Machines Forum 'SSI.php' Security Bypass Vulnerability
An attacker can exploit this issue through a browser.
An attacker can exploit this issue through a browser.
Solution / Fix
Simple Machines Forum 'SSI.php' Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Simple Machines Forum 'SSI.php' Security Bypass Vulnerability
References:
References:
- Simple Machines Homepage (Simple Machines)
- SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5 (Simple Machines)