CVE-2016-5726

Опубликовано: 09 фев. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.

Ссылки

http://www.openwall.com/lists/oss-security/2016/06/10/7
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/18/1
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/10/7
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/18/1
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:simplemachines:simple_machines_forum:2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00839

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-x6jj-7mw4-r7fv