Access Bypass Vulnerability in Simple Machines Forum by Simple Machines
CVE-2018-10305
9.8CRITICAL
What is CVE-2018-10305?
The MessageSearch2 function in PersonalMessage.php within Simple Machines Forum prior to version 2.0.15 contains a vulnerability that improperly handles the 'possible_users' variable in queries. This flaw may enable attackers to circumvent access restrictions, potentially leading to unauthorized access to sensitive messages or data. Users are urged to update to the latest version to mitigate this security issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
