CVE-2011-1127

KRITISCH 10.0CVE-2011-1127 · Published 21/06/2011 · updated 16/06/2026

Kurz gesagt

CVE-2011-1127 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in smf (simplemachines).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.2%, höher als bei 82.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
smf simplemachines	`= 1.0= 1.0.1= 1.0.10= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.2= 1.0.20= 1.0.21= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1= 1.1.1= 1.1.10= 1.1.11= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 2.0≤ 1.1.12`	No fix yet

Description

SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.

References

custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip · Patch
openwall.com/lists/oss-security/2011/02/22/17 · Patch
openwall.com/lists/oss-security/2011/03/02/4 · Patch
simplemachines.org/community/index.php · Patch

Weitere Schwachstellen in smf

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

smf

simplemachines

= 1.0= 1.0.1= 1.0.10= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.2= 1.0.20= 1.0.21= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1= 1.1.1= 1.1.10= 1.1.11= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 2.0≤ 1.1.12

No fix yet

Weitere Schwachstellen in smf

Alle anzeigen →