CVE-2009-5068

State: Published
Severity: Not scored
Published: Jan 15, 2020
Updated: Aug 7, 2024
Reserved: Apr 5, 2011

Description

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SMFSMF	through 2.0.3Affected

References

http://www.openwall.com/lists/oss-security/2013/02/01/4

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.