Vulnerability Details CVE-2011-1131
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip
- http://www.openwall.com/lists/oss-security/2011/02/22/17
- http://www.openwall.com/lists/oss-security/2011/03/02/4
- http://www.simplemachines.org/community/index.php?topic=421547.0
- http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip
- http://www.openwall.com/lists/oss-security/2011/02/22/17
- http://www.openwall.com/lists/oss-security/2011/03/02/4
- http://www.simplemachines.org/community/index.php?topic=421547.0
Products affected by CVE-2011-1131
-
cpe:2.3:a:simplemachines:smf:*
-
cpe:2.3:a:simplemachines:smf:1.0
-
cpe:2.3:a:simplemachines:smf:1.0.1
-
cpe:2.3:a:simplemachines:smf:1.0.10
-
cpe:2.3:a:simplemachines:smf:1.0.12
-
cpe:2.3:a:simplemachines:smf:1.0.13
-
cpe:2.3:a:simplemachines:smf:1.0.14
-
cpe:2.3:a:simplemachines:smf:1.0.15
-
cpe:2.3:a:simplemachines:smf:1.0.16
-
cpe:2.3:a:simplemachines:smf:1.0.17
-
cpe:2.3:a:simplemachines:smf:1.0.18
-
cpe:2.3:a:simplemachines:smf:1.0.19
-
cpe:2.3:a:simplemachines:smf:1.0.2
-
cpe:2.3:a:simplemachines:smf:1.0.20
-
cpe:2.3:a:simplemachines:smf:1.0.21
-
cpe:2.3:a:simplemachines:smf:1.0.3
-
cpe:2.3:a:simplemachines:smf:1.0.4
-
cpe:2.3:a:simplemachines:smf:1.0.5
-
cpe:2.3:a:simplemachines:smf:1.0.6
-
cpe:2.3:a:simplemachines:smf:1.0.7
-
cpe:2.3:a:simplemachines:smf:1.0.8
-
cpe:2.3:a:simplemachines:smf:1.0.9
-
cpe:2.3:a:simplemachines:smf:1.1
-
cpe:2.3:a:simplemachines:smf:1.1.1
-
cpe:2.3:a:simplemachines:smf:1.1.10
-
cpe:2.3:a:simplemachines:smf:1.1.11
-
cpe:2.3:a:simplemachines:smf:1.1.2
-
cpe:2.3:a:simplemachines:smf:1.1.3
-
cpe:2.3:a:simplemachines:smf:1.1.4
-
cpe:2.3:a:simplemachines:smf:1.1.5
-
cpe:2.3:a:simplemachines:smf:1.1.6
-
cpe:2.3:a:simplemachines:smf:1.1.7
-
cpe:2.3:a:simplemachines:smf:1.1.8
-
cpe:2.3:a:simplemachines:smf:1.1.9
-
cpe:2.3:a:simplemachines:smf:2.0