CVE Vulnerability

CVE-2007-3942

** DISPUTED ** Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourcedir and actionArray are defined before use.

5.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 4.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/35451
http://www.securityfocus.com/archive/1/480572/100/0/threaded
http://www.securityfocus.com/archive/1/473991/100/0/threaded
http://www.securityfocus.com/archive/1/473866/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:simple_machines:simple_machines_forum:1.1.3:*:*:*:*:*:*:*
Information

Published : 2007-07-21 12:30

Updated : 2018-10-15 09:32

NVD link : CVE-2007-3942

Mitre link : CVE-2007-3942

Products Affected
No products.
CWE
NVD-CWE-Other