Vulnerability in Simple Machines Forum

CVE-2007-5943

Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message.

EPSS: 0.011 (61.2th percentile) — read the EPSS interpretation.

Affected products

Simple_machines Simple_machines_forum — versions 1.1.4
N/a — versions n/a

Weakness classification (CWE)

CWE-16

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)