CVE-2011-1131: Infoleak
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1131?
CVE-2011-1131 is categorized as a high severity vulnerability due to its exploitation potential.
How do I fix CVE-2011-1131?
To address CVE-2011-1131, upgrade Simple Machines Forum to version 1.1.13 or 2.0 RC5 or later.
What versions of Simple Machines Forum are affected by CVE-2011-1131?
CVE-2011-1131 affects Simple Machines Forum versions prior to 1.1.13 and 2.x prior to 2.0 RC5.
What type of vulnerability is CVE-2011-1131?
CVE-2011-1131 is a vulnerability related to improper handling of cached data when temporary tables are created.
What could happen if CVE-2011-1131 is exploited?
Exploitation of CVE-2011-1131 could lead to unauthorized access to sensitive data stored in temporary tables.