7.5

CVE-2013-7235

Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Simplemachines ≫ Simple Machines Forum Version1.0 Updatebeta4
Simplemachines ≫ Simple Machines Forum Version1.0 Updatebeta4.1
Simplemachines ≫ Simple Machines Forum Version1.0 Updatebeta5
Simplemachines ≫ Simple Machines Forum Version1.0 Updatebeta6
Simplemachines ≫ Simple Machines Forum Version1.0 Updaterc1
Simplemachines ≫ Simple Machines Forum Version1.0 Updaterc2
Simplemachines ≫ Simple Machines Forum Version1.1 Updatebeta1
Simplemachines ≫ Simple Machines Forum Version1.1 Updatebeta2
Simplemachines ≫ Simple Machines Forum Version1.1 Updatebeta3
Simplemachines ≫ Simple Machines Forum Version1.1 Updatebeta4
Simplemachines ≫ Simple Machines Forum Version1.1 Updaterc1
Simplemachines ≫ Simple Machines Forum Version1.1 Updaterc2
Simplemachines ≫ Simple Machines Forum Version1.1 Updaterc3
Simplemachines ≫ Simple Machines Forum Version2.0 Updatebeta1
Simplemachines ≫ Simple Machines Forum Version2.0 Updatebeta2
Simplemachines ≫ Simple Machines Forum Version2.0 Updatebeta2.1
Simplemachines ≫ Simple Machines Forum Version2.0 Updatebeta3
Simplemachines ≫ Simple Machines Forum Version2.0 Updatebeta3.1
Simplemachines ≫ Simple Machines Forum Version2.0 Updatebeta4
Simplemachines ≫ Simple Machines Forum Version2.0 Updaterc1
Simplemachines ≫ Simple Machines Forum Version2.0 Updaterc2
Simplemachines ≫ Simple Machines Forum Version2.0 Updaterc3
Simplemachines ≫ Simple Machines Forum Version2.0 Updaterc4
Simplemachines ≫ Simple Machines Forum Version2.0 Updaterc5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.68% 0.691
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.