Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during a jsoption action, related to Sources/QueryString.php and Sources/Themes.php, as demonstrated by a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php.
References
| Link | Resource |
|---|---|
| http://osvdb.org/50072 | |
| http://secunia.com/advisories/32516 | Vendor Advisory |
| http://www.securityfocus.com/bid/32139 | Exploit |
| http://www.simplemachines.org/community/index.php?topic=272861.0 | Vendor Advisory |
| https://www.exploit-db.com/exploits/7011 | |
| http://osvdb.org/50072 | |
| http://secunia.com/advisories/32516 | Vendor Advisory |
| http://www.securityfocus.com/bid/32139 | Exploit |
| http://www.simplemachines.org/community/index.php?topic=272861.0 | Vendor Advisory |
| https://www.exploit-db.com/exploits/7011 |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://osvdb.org/50072 - | |
| References | () http://secunia.com/advisories/32516 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/32139 - Exploit | |
| References | () http://www.simplemachines.org/community/index.php?topic=272861.0 - Vendor Advisory | |
| References | () https://www.exploit-db.com/exploits/7011 - |
Information
Published : 2009-04-07 19:30
Updated : 2024-11-21 00:57
NVD link : CVE-2008-6659
Mitre link : CVE-2008-6659
CVE.ORG link : CVE-2008-6659
JSON object : View
Products Affected
simple_machines
- simple_machines_forum
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')