CVEvulnerability
CVE-2013-7234
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.
Affected configurations
• simplemachines simple machines forum (<= 1.1.9)
• simplemachines simple machines forum 1.0
• simplemachines simple machines forum 1.0.1
• simplemachines simple machines forum 1.0.2
• simplemachines simple machines forum 1.0.3
• simplemachines simple machines forum 1.0.4
• simplemachines simple machines forum 1.0.5
• simplemachines simple machines forum 1.0.6
• simplemachines simple machines forum 1.0.7
• simplemachines simple machines forum 1.0.8
• simplemachines simple machines forum 1.0.9
• simplemachines simple machines forum 1.0.10
• simplemachines simple machines forum 1.0.12
• simplemachines simple machines forum 1.0.13
• simplemachines simple machines forum 1.0.14
• simplemachines simple machines forum 1.0.15
• simplemachines simple machines forum 1.0.16
• simplemachines simple machines forum 1.0.17
• simplemachines simple machines forum 1.0.18
• simplemachines simple machines forum 1.0.19
• simplemachines simple machines forum 1.0.20
• simplemachines simple machines forum 1.0.21
• simplemachines simple machines forum 1.0.22
• simplemachines simple machines forum 1.0.23
• simplemachines simple machines forum 1.1
• simplemachines simple machines forum 1.1.1
• simplemachines simple machines forum 1.1.2
• simplemachines simple machines forum 1.1.3
• simplemachines simple machines forum 1.1.4
• simplemachines simple machines forum 1.1.5
• simplemachines simple machines forum 1.1.6
• simplemachines simple machines forum 1.1.7
• simplemachines simple machines forum 1.1.8
• simplemachines simple machines forum 1.1.10
• simplemachines simple machines forum 1.1.11
• simplemachines simple machines forum 1.1.12
• simplemachines simple machines forum 1.1.13
• simplemachines simple machines forum 1.1.14
• simplemachines simple machines forum 1.1.15
• simplemachines simple machines forum 1.1.16
• simplemachines simple machines forum 1.1.17
• simplemachines simple machines forum 2.0
• simplemachines simple machines forum 2.0.1
• simplemachines simple machines forum 2.0.2
• simplemachines simple machines forum 2.0.3
• simplemachines simple machines forum 2.0.4
• simplemachines simple machines forum 2.0.5
• simplemachines simple machines forum 2.0.6
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt download.simplemachines.org
- http://seclists.org/fulldisclosure/2013/Dec/83 seclists.org
- http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/ www.jakoblell.com
- http://www.openwall.com/lists/oss-security/2013/12/30/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/12/30/3 www.openwall.com
- http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt download.simplemachines.org
- http://seclists.org/fulldisclosure/2013/Dec/83 seclists.org
- http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/ www.jakoblell.com
- http://www.openwall.com/lists/oss-security/2013/12/30/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/12/30/3 www.openwall.com