Information disclosure in Simplemachines Smf

CVE-2011-1131

The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only f…

Vulnerability class: Information Disclosure

EPSS: 0.012 (65.7th percentile) — read the EPSS interpretation.

Affected products

Simplemachines Smf — versions 1.0, 1.0.1, 1.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (mailing-list, x_refsource_MLIST, Patch)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (mailing-list, x_refsource_MLIST, Patch)
cve@mitre.org (x_refsource_CONFIRM, Patch)