CVE-2016-5727 | BDVDB-2026-81471 Detail

Description#

LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/SimpleMachines/SMF2.1/issues/3522
https://github.com/SimpleMachines/SMF2.1/commit/19e560b9f3e8fc6d7d9d60c1ff617b5ed5c08008#diff-513c4f9c501cbefcc14420c01848f23c
http://www.openwall.com/lists/oss-security/2016/06/18/1
http://www.openwall.com/lists/oss-security/2016/06/10/7

Exploit#

No public exploit known

History#

Version 12017-02-09Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.