CVE-2013-7235

EUVD-2013-7014
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
Affected Products (NVD)
VendorProductVersion
simplemachinessimple_machines_forum
𝑥
≤ 1.1.9
simplemachinessimple_machines_forum
1.0
simplemachinessimple_machines_forum
1.0:beta4
simplemachinessimple_machines_forum
1.0:beta4.1
simplemachinessimple_machines_forum
1.0:beta5
simplemachinessimple_machines_forum
1.0:beta6
simplemachinessimple_machines_forum
1.0:rc1
simplemachinessimple_machines_forum
1.0:rc2
simplemachinessimple_machines_forum
1.0.1
simplemachinessimple_machines_forum
1.0.2
simplemachinessimple_machines_forum
1.0.3
simplemachinessimple_machines_forum
1.0.4
simplemachinessimple_machines_forum
1.0.5
simplemachinessimple_machines_forum
1.0.6
simplemachinessimple_machines_forum
1.0.7
simplemachinessimple_machines_forum
1.0.8
simplemachinessimple_machines_forum
1.0.9
simplemachinessimple_machines_forum
1.0.10
simplemachinessimple_machines_forum
1.0.12
simplemachinessimple_machines_forum
1.0.13
simplemachinessimple_machines_forum
1.0.14
simplemachinessimple_machines_forum
1.0.15
simplemachinessimple_machines_forum
1.0.16
simplemachinessimple_machines_forum
1.0.17
simplemachinessimple_machines_forum
1.0.18
simplemachinessimple_machines_forum
1.0.19
simplemachinessimple_machines_forum
1.0.20
simplemachinessimple_machines_forum
1.0.21
simplemachinessimple_machines_forum
1.0.22
simplemachinessimple_machines_forum
1.0.23
simplemachinessimple_machines_forum
1.1
simplemachinessimple_machines_forum
1.1:beta1
simplemachinessimple_machines_forum
1.1:beta2
simplemachinessimple_machines_forum
1.1:beta3
simplemachinessimple_machines_forum
1.1:beta4
simplemachinessimple_machines_forum
1.1:rc1
simplemachinessimple_machines_forum
1.1:rc2
simplemachinessimple_machines_forum
1.1:rc3
simplemachinessimple_machines_forum
1.1.1
simplemachinessimple_machines_forum
1.1.2
simplemachinessimple_machines_forum
1.1.3
simplemachinessimple_machines_forum
1.1.4
simplemachinessimple_machines_forum
1.1.5
simplemachinessimple_machines_forum
1.1.6
simplemachinessimple_machines_forum
1.1.7
simplemachinessimple_machines_forum
1.1.8
simplemachinessimple_machines_forum
1.1.10
simplemachinessimple_machines_forum
1.1.11
simplemachinessimple_machines_forum
1.1.12
simplemachinessimple_machines_forum
1.1.13
simplemachinessimple_machines_forum
1.1.14
simplemachinessimple_machines_forum
1.1.15
simplemachinessimple_machines_forum
1.1.16
simplemachinessimple_machines_forum
1.1.17
simplemachinessimple_machines_forum
2.0:beta1
simplemachinessimple_machines_forum
2.0:beta2
simplemachinessimple_machines_forum
2.0:beta2.1
simplemachinessimple_machines_forum
2.0:beta3
simplemachinessimple_machines_forum
2.0:beta3.1
simplemachinessimple_machines_forum
2.0:beta4
simplemachinessimple_machines_forum
2.0:rc1
simplemachinessimple_machines_forum
2.0:rc2
simplemachinessimple_machines_forum
2.0:rc3
simplemachinessimple_machines_forum
2.0:rc4
simplemachinessimple_machines_forum
2.0:rc5
simplemachinessimple_machines_forum
2.0.1
simplemachinessimple_machines_forum
2.0.2
simplemachinessimple_machines_forum
2.0.3
simplemachinessimple_machines_forum
2.0.4
simplemachinessimple_machines_forum
2.0.5
simplemachinessimple_machines_forum
2.0.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt
http://seclists.org/fulldisclosure/2013/Dec/83
http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
http://www.openwall.com/lists/oss-security/2013/12/30/1
http://www.openwall.com/lists/oss-security/2013/12/30/3
http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt
http://seclists.org/fulldisclosure/2013/Dec/83
http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
http://www.openwall.com/lists/oss-security/2013/12/30/1
http://www.openwall.com/lists/oss-security/2013/12/30/3