Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:00
Type | Values Removed | Values Added |
---|---|---|
References | () http://seclists.org/fulldisclosure/2013/Dec/83 - | |
References | () http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/ - | |
References | () http://www.openwall.com/lists/oss-security/2013/12/30/1 - | |
References | () http://www.openwall.com/lists/oss-security/2013/12/30/3 - |
Information
Published : 2014-04-29 14:38
Updated : 2024-11-21 02:00
NVD link : CVE-2013-7236
Mitre link : CVE-2013-7236
CVE.ORG link : CVE-2013-7236
JSON object : View
Products Affected
simplemachines
- simple_machines_forum
CWE
CWE-20
Improper Input Validation