PT-2019-7015
CVE-2013-7466
·
تاريخ النشر
2019-03-07
·
تاريخ التحديث
2019-03-12
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Simple Machines Forum (SMF) version 2.0.4
Description
The issue allows for local file inclusion, which can result in remote code execution. This is achieved through directory traversal in the
db type parameter of the install.php file. The vulnerability is exploitable if the install.php file remains present after the installation process.Recommendations
For version 2.0.4, remove or restrict access to the install.php file to prevent exploitation. As a temporary workaround, consider restricting the
db type parameter in the install.php file until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾