CVE-2013-7235

Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
simplemachinessimple_machines_forum
𝑥
≤ 1.1.9
simplemachinessimple_machines_forum
1.0
simplemachinessimple_machines_forum
1.0:beta4
simplemachinessimple_machines_forum
1.0:beta4.1
simplemachinessimple_machines_forum
1.0:beta5
simplemachinessimple_machines_forum
1.0:beta6
simplemachinessimple_machines_forum
1.0:rc1
simplemachinessimple_machines_forum
1.0:rc2
simplemachinessimple_machines_forum
1.0.1
simplemachinessimple_machines_forum
1.0.2
simplemachinessimple_machines_forum
1.0.3
simplemachinessimple_machines_forum
1.0.4
simplemachinessimple_machines_forum
1.0.5
simplemachinessimple_machines_forum
1.0.6
simplemachinessimple_machines_forum
1.0.7
simplemachinessimple_machines_forum
1.0.8
simplemachinessimple_machines_forum
1.0.9
simplemachinessimple_machines_forum
1.0.10
simplemachinessimple_machines_forum
1.0.12
simplemachinessimple_machines_forum
1.0.13
simplemachinessimple_machines_forum
1.0.14
simplemachinessimple_machines_forum
1.0.15
simplemachinessimple_machines_forum
1.0.16
simplemachinessimple_machines_forum
1.0.17
simplemachinessimple_machines_forum
1.0.18
simplemachinessimple_machines_forum
1.0.19
simplemachinessimple_machines_forum
1.0.20
simplemachinessimple_machines_forum
1.0.21
simplemachinessimple_machines_forum
1.0.22
simplemachinessimple_machines_forum
1.0.23
simplemachinessimple_machines_forum
1.1
simplemachinessimple_machines_forum
1.1:beta1
simplemachinessimple_machines_forum
1.1:beta2
simplemachinessimple_machines_forum
1.1:beta3
simplemachinessimple_machines_forum
1.1:beta4
simplemachinessimple_machines_forum
1.1:rc1
simplemachinessimple_machines_forum
1.1:rc2
simplemachinessimple_machines_forum
1.1:rc3
simplemachinessimple_machines_forum
1.1.1
simplemachinessimple_machines_forum
1.1.2
simplemachinessimple_machines_forum
1.1.3
simplemachinessimple_machines_forum
1.1.4
simplemachinessimple_machines_forum
1.1.5
simplemachinessimple_machines_forum
1.1.6
simplemachinessimple_machines_forum
1.1.7
simplemachinessimple_machines_forum
1.1.8
simplemachinessimple_machines_forum
1.1.10
simplemachinessimple_machines_forum
1.1.11
simplemachinessimple_machines_forum
1.1.12
simplemachinessimple_machines_forum
1.1.13
simplemachinessimple_machines_forum
1.1.14
simplemachinessimple_machines_forum
1.1.15
simplemachinessimple_machines_forum
1.1.16
simplemachinessimple_machines_forum
1.1.17
simplemachinessimple_machines_forum
2.0:beta1
simplemachinessimple_machines_forum
2.0:beta2
simplemachinessimple_machines_forum
2.0:beta2.1
simplemachinessimple_machines_forum
2.0:beta3
simplemachinessimple_machines_forum
2.0:beta3.1
simplemachinessimple_machines_forum
2.0:beta4
simplemachinessimple_machines_forum
2.0:rc1
simplemachinessimple_machines_forum
2.0:rc2
simplemachinessimple_machines_forum
2.0:rc3
simplemachinessimple_machines_forum
2.0:rc4
simplemachinessimple_machines_forum
2.0:rc5
simplemachinessimple_machines_forum
2.0.1
simplemachinessimple_machines_forum
2.0.2
simplemachinessimple_machines_forum
2.0.3
simplemachinessimple_machines_forum
2.0.4
simplemachinessimple_machines_forum
2.0.5
simplemachinessimple_machines_forum
2.0.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt
http://seclists.org/fulldisclosure/2013/Dec/83
http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
http://www.openwall.com/lists/oss-security/2013/12/30/1
http://www.openwall.com/lists/oss-security/2013/12/30/3
http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt
http://seclists.org/fulldisclosure/2013/Dec/83
http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
http://www.openwall.com/lists/oss-security/2013/12/30/1
http://www.openwall.com/lists/oss-security/2013/12/30/3