NetSight
high8.8

CVE-2013-7466

Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type …

Impact

Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.

Affected products

VendorProductAffected versions
SimplemachinesSimple Machines Forum
Version 2.0.4

Weakness classification

References