cbcvebase.
CVE-2011-1130
published 2011-06-21

CVE-2011-1130: Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to…

PriorityP433high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.08%
61.0th percentile
Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest function in QueryString.php and the constructPageIndex function in Subs.php.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
simplemachinessmf<= 1.1.12—
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.