CVE-2008-6657 | BDVDB-2026-35987 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/32119
http://secunia.com/advisories/32516
http://www.simplemachines.org/community/index.php?topic=272861.0
https://www.exploit-db.com/exploits/6993
https://exchange.xforce.ibmcloud.com/vulnerabilities/46343
http://osvdb.org/50071

Exploit#

https://www.exploit-db.com/exploits/6993

History#

Version 12009-04-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.