Unscored CVE-2016-5726 EUVD-2016-6664GHSA-x6jj-7mw4-r7fv

Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP c…

Published Feb 9, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.

References

[oss-security] 20160618 Re: Simple Machines Forums - PHP Object Injection mailing-list
[oss-security] 20160610 Simple Machines Forums - PHP Object Injection mailing-list