cbcvebase.
CVE-2011-1131
published 2011-06-21

CVE-2011-1131: The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a…

PriorityP420medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.24%
65.5th percentile
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
simplemachinessmf<= 1.1.12—
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
simplemachinessmf——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.