Description
Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message.
References
- 26508 vdb-entry
- 20071108 Simple Machine Forum - Private section/posts/info disclosure mailing-list