7.5

CVE-2013-7236

Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta4
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta4.1
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta5
Simplemachines ≫ Simple Machines Forum Version 1.0 Update beta6
Simplemachines ≫ Simple Machines Forum Version 1.0 Update rc1
Simplemachines ≫ Simple Machines Forum Version 1.0 Update rc2
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta1
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta2
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta3
Simplemachines ≫ Simple Machines Forum Version 1.1 Update beta4
Simplemachines ≫ Simple Machines Forum Version 1.1 Update rc1
Simplemachines ≫ Simple Machines Forum Version 1.1 Update rc2
Simplemachines ≫ Simple Machines Forum Version 1.1 Update rc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.53% 0.714
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://seclists.org/fulldisclosure/2013/Dec/83
http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
http://www.openwall.com/lists/oss-security/2013/12/30/1
http://www.openwall.com/lists/oss-security/2013/12/30/3