Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.
References
Link | Resource |
---|---|
https://packetstormsecurity.com/files/121391/public_phpInjection-smf204.txt | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2019-03-07 15:29
Updated : 2019-03-08 10:10
NVD link : CVE-2013-7468
Mitre link : CVE-2013-7468
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
simplemachines
- simple_machines_forum