CVE-2011-1130
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest function in QueryString.php and the constructPageIndex function in Subs.php.
Simple Machines Forum (SMF ) antes de v1.1.13, y v2.x antes de v2.0 RC5, no valida correctamente los parámetros de inicio, lo que podría permitir a atacantes remotos realizar ataques de inyección SQL, obtener información sensible o causar una denegación de servicio a través de un valor creado, en relación con la función cleanRequest en QueryString.php y la función constructPageIndex en Subs.php.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-03-02 CVE Reserved
- 2011-06-21 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (4)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | <= 1.1.12 Search vendor "Simplemachines" for product "Smf" and version " <= 1.1.12" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0 Search vendor "Simplemachines" for product "Smf" and version "1.0" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0 Search vendor "Simplemachines" for product "Smf" and version "1.0" | beta4 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0 Search vendor "Simplemachines" for product "Smf" and version "1.0" | beta4.1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0 Search vendor "Simplemachines" for product "Smf" and version "1.0" | beta5 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0 Search vendor "Simplemachines" for product "Smf" and version "1.0" | beta6 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0 Search vendor "Simplemachines" for product "Smf" and version "1.0" | rc1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0 Search vendor "Simplemachines" for product "Smf" and version "1.0" | rc2 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.1 Search vendor "Simplemachines" for product "Smf" and version "1.0.1" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.2 Search vendor "Simplemachines" for product "Smf" and version "1.0.2" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.3 Search vendor "Simplemachines" for product "Smf" and version "1.0.3" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.4 Search vendor "Simplemachines" for product "Smf" and version "1.0.4" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.5 Search vendor "Simplemachines" for product "Smf" and version "1.0.5" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.6 Search vendor "Simplemachines" for product "Smf" and version "1.0.6" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.7 Search vendor "Simplemachines" for product "Smf" and version "1.0.7" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.8 Search vendor "Simplemachines" for product "Smf" and version "1.0.8" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.9 Search vendor "Simplemachines" for product "Smf" and version "1.0.9" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.10 Search vendor "Simplemachines" for product "Smf" and version "1.0.10" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.12 Search vendor "Simplemachines" for product "Smf" and version "1.0.12" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.13 Search vendor "Simplemachines" for product "Smf" and version "1.0.13" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.14 Search vendor "Simplemachines" for product "Smf" and version "1.0.14" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.15 Search vendor "Simplemachines" for product "Smf" and version "1.0.15" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.16 Search vendor "Simplemachines" for product "Smf" and version "1.0.16" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.17 Search vendor "Simplemachines" for product "Smf" and version "1.0.17" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.18 Search vendor "Simplemachines" for product "Smf" and version "1.0.18" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.19 Search vendor "Simplemachines" for product "Smf" and version "1.0.19" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.20 Search vendor "Simplemachines" for product "Smf" and version "1.0.20" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.0.21 Search vendor "Simplemachines" for product "Smf" and version "1.0.21" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | beta1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | beta2 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | beta3 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | beta4 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | rc1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | rc2 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1" | rc3 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.1 Search vendor "Simplemachines" for product "Smf" and version "1.1.1" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.2 Search vendor "Simplemachines" for product "Smf" and version "1.1.2" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.3 Search vendor "Simplemachines" for product "Smf" and version "1.1.3" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.4 Search vendor "Simplemachines" for product "Smf" and version "1.1.4" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.5 Search vendor "Simplemachines" for product "Smf" and version "1.1.5" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.6 Search vendor "Simplemachines" for product "Smf" and version "1.1.6" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.7 Search vendor "Simplemachines" for product "Smf" and version "1.1.7" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.8 Search vendor "Simplemachines" for product "Smf" and version "1.1.8" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.9 Search vendor "Simplemachines" for product "Smf" and version "1.1.9" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.10 Search vendor "Simplemachines" for product "Smf" and version "1.1.10" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 1.1.11 Search vendor "Simplemachines" for product "Smf" and version "1.1.11" | - |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | beta1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | beta2 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | beta2.1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | beta3 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | beta3.1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | beta4 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | rc1 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | rc2 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | rc3 |
Affected
| ||||||
| Simplemachines Search vendor "Simplemachines" | Smf Search vendor "Simplemachines" for product "Smf" | 2.0 Search vendor "Simplemachines" for product "Smf" and version "2.0" | rc4 |
Affected
| ||||||