CVE-2013-0192 Information disclosure in SMF
A forum administrator can exploit this vulnerability to read sensitive files, such as database configuration files, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-0192?
CVE-2013-0192 is a medium-severity vulnerability in SMF, published on 7 Feb 2020. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.
Weakness: CWE-200
Which versions are affected by CVE-2013-0192?
It affects 1 product.
Products include Simplemachines Simple Machines Forum.
How do I fix CVE-2013-0192?
No fix has been published for CVE-2013-0192 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-0192 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-0192 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in SMF
Sources
Also known as GHSA-8v3c-5fgv-rv7x.