CVEvulnerability
CVE-2011-1127
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-06-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
Affected configurations
• simplemachines smf (<= 1.1.12)
• simplemachines smf 1.0
• simplemachines smf 1.0.1
• simplemachines smf 1.0.2
• simplemachines smf 1.0.3
• simplemachines smf 1.0.4
• simplemachines smf 1.0.5
• simplemachines smf 1.0.6
• simplemachines smf 1.0.7
• simplemachines smf 1.0.8
• simplemachines smf 1.0.9
• simplemachines smf 1.0.10
• simplemachines smf 1.0.12
• simplemachines smf 1.0.13
• simplemachines smf 1.0.14
• simplemachines smf 1.0.15
• simplemachines smf 1.0.16
• simplemachines smf 1.0.17
• simplemachines smf 1.0.18
• simplemachines smf 1.0.19
• simplemachines smf 1.0.20
• simplemachines smf 1.0.21
• simplemachines smf 1.1
• simplemachines smf 1.1.1
• simplemachines smf 1.1.2
• simplemachines smf 1.1.3
• simplemachines smf 1.1.4
• simplemachines smf 1.1.5
• simplemachines smf 1.1.6
• simplemachines smf 1.1.7
• simplemachines smf 1.1.8
• simplemachines smf 1.1.9
• simplemachines smf 1.1.10
• simplemachines smf 1.1.11
• simplemachines smf 2.0
Related
Weakness · not in database (1)
References
- http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip Patch
- http://www.openwall.com/lists/oss-security/2011/02/22/17 Patch
- http://www.openwall.com/lists/oss-security/2011/03/02/4 Patch
- http://www.simplemachines.org/community/index.php?topic=421547.0 Patch
- http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip Patch
- http://www.openwall.com/lists/oss-security/2011/02/22/17 Patch
- http://www.openwall.com/lists/oss-security/2011/03/02/4 Patch
- http://www.simplemachines.org/community/index.php?topic=421547.0 Patch