Description
SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
References
- [oss-security] 20110222 CVE request: simple machines forum before 1.1.13 mailing-list
- http://www.simplemachines.org/community/index.php?topic=421547.0
- [oss-security] 20110302 Re: CVE request: simple machines forum before 1.1.13 mailing-list
- http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip