medium4.9Public exploit code
CVE-2013-0192
File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Vulnerabilities2009-12-02 · webapps · php · Verified
Impact
File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplemachines | Simple Machines Forum | through 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2013/01/17/5
- http://www.openwall.com/lists/oss-security/2013/01/31/1
- http://www.openwall.com/lists/oss-security/2013/02/01/4
- http://www.openwall.com/lists/oss-security/2013/01/17/5
- http://www.openwall.com/lists/oss-security/2013/01/31/1
- http://www.openwall.com/lists/oss-security/2013/02/01/4