PHP Code Injection in Simple Machines Forum 2.0.4 by Simple Machines
CVE-2013-7468

8.1HIGH

Key Information:

Vendor

Simplemachines

Status
Simple Machines Forum
Vendor
CVE Published:
7 March 2019

What is CVE-2013-7468?

A vulnerability exists in Simple Machines Forum (SMF) 2.0.4 that allows attackers to execute arbitrary PHP code through manipulation of the 'dictionary' parameter in the index.php file when accessing the languages editing section. This flaw poses a serious risk as it can potentially lead to unauthorized access and control over the server, compromising the integrity and confidentiality of user data.

References

https://packetstormsecurity.com/files/121391/public_phpIn...
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.