CVEvulnerability

CVE-2011-1127

10.0 HIGH Published 2011-06-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-06-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.

Affected configurations

• simplemachines smf (<= 1.1.12) • simplemachines smf 1.0 • simplemachines smf 1.0.1 • simplemachines smf 1.0.2 • simplemachines smf 1.0.3 • simplemachines smf 1.0.4 • simplemachines smf 1.0.5 • simplemachines smf 1.0.6 • simplemachines smf 1.0.7 • simplemachines smf 1.0.8 • simplemachines smf 1.0.9 • simplemachines smf 1.0.10 • simplemachines smf 1.0.12 • simplemachines smf 1.0.13 • simplemachines smf 1.0.14 • simplemachines smf 1.0.15 • simplemachines smf 1.0.16 • simplemachines smf 1.0.17 • simplemachines smf 1.0.18 • simplemachines smf 1.0.19 • simplemachines smf 1.0.20 • simplemachines smf 1.0.21 • simplemachines smf 1.1 • simplemachines smf 1.1.1 • simplemachines smf 1.1.2 • simplemachines smf 1.1.3 • simplemachines smf 1.1.4 • simplemachines smf 1.1.5 • simplemachines smf 1.1.6 • simplemachines smf 1.1.7 • simplemachines smf 1.1.8 • simplemachines smf 1.1.9 • simplemachines smf 1.1.10 • simplemachines smf 1.1.11 • simplemachines smf 2.0

Related

Weakness · not in database (1)

References