CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11574

An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 70.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-11574

Simplemachines » Simple Machine Forum » Version: N/A

cpe:2.3:a:simplemachines:simple_machine_forum:-
Simplemachines » Simple Machine Forum » Version: 1.0

cpe:2.3:a:simplemachines:simple_machine_forum:1.0
Simplemachines » Simple Machine Forum » Version: 1.0.1

cpe:2.3:a:simplemachines:simple_machine_forum:1.0.1
Simplemachines » Simple Machine Forum » Version: 1.0.2

cpe:2.3:a:simplemachines:simple_machine_forum:1.0.2
Simplemachines » Simple Machine Forum » Version: 1.0.3

cpe:2.3:a:simplemachines:simple_machine_forum:1.0.3
Simplemachines » Simple Machine Forum » Version: 1.0.4

cpe:2.3:a:simplemachines:simple_machine_forum:1.0.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11574

Products

Pricing

Contact Us