critical9.8
CVE-2016-5726
Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themecha…
Impact
Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplemachines | Simple Machines Forum | Version 2.1 |