Unscored CVE-2013-7236 EUVD-2013-7015GHSA-jmcr-c7vm-2frw

Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph chara…

Published Apr 29, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.

References

[oss-security] 20131230 CVE request: SMF 1.1.19, 2.0.6 mailing-list
[oss-security] 20131229 Re: CVE request: SMF 1.1.19, 2.0.6 mailing-list
20131213 Multiple vulnerabilities in SMF forum software mailing-list
http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/