CVE-2013-7466

Name of the Vulnerable Software and Affected Versions Simple Machines Forum (SMF) version 2.0.4

Description The issue allows for local file inclusion, which can result in remote code execution. This is achieved through directory traversal in the db type parameter of the install.php file. The vulnerability is exploitable if the install.php file remains present after the installation process.

Recommendations For version 2.0.4, remove or restrict access to the install.php file to prevent exploitation. As a temporary workaround, consider restricting the db type parameter in the install.php file until a patch is available.