Vulnerability Details CVE-2011-1127
SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.8%
CVSS Severity
CVSS v2 Score 10.0
Products affected by CVE-2011-1127
-
cpe:2.3:a:simplemachines:smf:*
-
cpe:2.3:a:simplemachines:smf:1.0
-
cpe:2.3:a:simplemachines:smf:1.0.1
-
cpe:2.3:a:simplemachines:smf:1.0.10
-
cpe:2.3:a:simplemachines:smf:1.0.12
-
cpe:2.3:a:simplemachines:smf:1.0.13
-
cpe:2.3:a:simplemachines:smf:1.0.14
-
cpe:2.3:a:simplemachines:smf:1.0.15
-
cpe:2.3:a:simplemachines:smf:1.0.16
-
cpe:2.3:a:simplemachines:smf:1.0.17
-
cpe:2.3:a:simplemachines:smf:1.0.18
-
cpe:2.3:a:simplemachines:smf:1.0.19
-
cpe:2.3:a:simplemachines:smf:1.0.2
-
cpe:2.3:a:simplemachines:smf:1.0.20
-
cpe:2.3:a:simplemachines:smf:1.0.21
-
cpe:2.3:a:simplemachines:smf:1.0.3
-
cpe:2.3:a:simplemachines:smf:1.0.4
-
cpe:2.3:a:simplemachines:smf:1.0.5
-
cpe:2.3:a:simplemachines:smf:1.0.6
-
cpe:2.3:a:simplemachines:smf:1.0.7
-
cpe:2.3:a:simplemachines:smf:1.0.8
-
cpe:2.3:a:simplemachines:smf:1.0.9
-
cpe:2.3:a:simplemachines:smf:1.1
-
cpe:2.3:a:simplemachines:smf:1.1.1
-
cpe:2.3:a:simplemachines:smf:1.1.10
-
cpe:2.3:a:simplemachines:smf:1.1.11
-
cpe:2.3:a:simplemachines:smf:1.1.2
-
cpe:2.3:a:simplemachines:smf:1.1.3
-
cpe:2.3:a:simplemachines:smf:1.1.4
-
cpe:2.3:a:simplemachines:smf:1.1.5
-
cpe:2.3:a:simplemachines:smf:1.1.6
-
cpe:2.3:a:simplemachines:smf:1.1.7
-
cpe:2.3:a:simplemachines:smf:1.1.8
-
cpe:2.3:a:simplemachines:smf:1.1.9
-
cpe:2.3:a:simplemachines:smf:2.0