CVE-2011-4173

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-4173
Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtained from third party information.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://openwall.com/lists/oss-security/2011/10/09/3
http://openwall.com/lists/oss-security/2011/10/10/6
http://secunia.com/advisories/46386 Vendor Advisory
http://www.simplemachines.org/community/index.php?topic=452888.0 Vendor Advisory
http://openwall.com/lists/oss-security/2011/10/09/3
http://openwall.com/lists/oss-security/2011/10/10/6
http://secunia.com/advisories/46386 Vendor Advisory
http://www.simplemachines.org/community/index.php?topic=452888.0 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:simplemachines:smf:2.0:*:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:beta1:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:beta2:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:beta2.1:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:beta3:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:beta3.1:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:beta4:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:rc1.2:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:rc2:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:rc3:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:rc4:*:*:*:*:*:*
cpe:2.3:a:simplemachines:smf:2.0:rc5:*:*:*:*:*:*
History

21 Nov 2024, 01:31

Type Values Removed Values Added
References () http://openwall.com/lists/oss-security/2011/10/09/3 - () http://openwall.com/lists/oss-security/2011/10/09/3 -
References () http://openwall.com/lists/oss-security/2011/10/10/6 - () http://openwall.com/lists/oss-security/2011/10/10/6 -
References () http://secunia.com/advisories/46386 - Vendor Advisory () http://secunia.com/advisories/46386 - Vendor Advisory
References () http://www.simplemachines.org/community/index.php?topic=452888.0 - Vendor Advisory () http://www.simplemachines.org/community/index.php?topic=452888.0 - Vendor Advisory
Information

Published : 2011-10-24 18:55

Updated : 2024-11-21 01:31

NVD link : CVE-2011-4173

Mitre link : CVE-2011-4173

CVE.ORG link : CVE-2011-4173

JSON object : View

Products Affected

simplemachines

  • smf
CWE
CWE-352

Cross-Site Request Forgery (CSRF)