7.5

CVE-2013-7235

Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta4
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta4.1
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta5
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta6
Simplemachines ≫ Simple Machines Forum Version 1.0 Update rc1
Simplemachines ≫ Simple Machines Forum Version 1.0 Update rc2
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta1
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta2
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta3
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta4
Simplemachines ≫ Simple Machines Forum Version 1.1 Update rc1
Simplemachines ≫ Simple Machines Forum Version 1.1 Update rc2
Simplemachines ≫ Simple Machines Forum Version 1.1 Update rc3
Simplemachines ≫ Simple Machines Forum Version 2.0 Update beta1
Simplemachines ≫ Simple Machines Forum Version 2.0 Update beta2
Simplemachines ≫ Simple Machines Forum Version 2.0 Update beta2.1
Simplemachines ≫ Simple Machines Forum Version 2.0 Update beta3
Simplemachines ≫ Simple Machines Forum Version 2.0 Update beta3.1
Simplemachines ≫ Simple Machines Forum Version 2.0 Update beta4
Simplemachines ≫ Simple Machines Forum Version 2.0 Update rc1
Simplemachines ≫ Simple Machines Forum Version 2.0 Update rc2
Simplemachines ≫ Simple Machines Forum Version 2.0 Update rc3
Simplemachines ≫ Simple Machines Forum Version 2.0 Update rc4
Simplemachines ≫ Simple Machines Forum Version 2.0 Update rc5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.53% 0.714
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt
http://seclists.org/fulldisclosure/2013/Dec/83
http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
http://www.openwall.com/lists/oss-security/2013/12/30/1
http://www.openwall.com/lists/oss-security/2013/12/30/3