CVE-2009-5068

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3

published January 15, 2020

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01732 · 77.4th percentile
Published
2020-01-15T20:27Z
EPSS history
Timeline
  • 15 JAN 20:27Z
    There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3
    cvelistv5