CVE-2013-7468: Code Injection
First published: Thu Mar 07 2019(Updated: )
Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Simplemachines Simple Machines Forum | =2.0.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2013-7468?
CVE-2013-7468 is a vulnerability in Simple Machines Forum (SMF) 2.0.4 that allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.
How severe is CVE-2013-7468?
CVE-2013-7468 has a severity score of 8.1, which is considered high.
How does CVE-2013-7468 affect Simple Machines Forum (SMF)?
CVE-2013-7468 affects Simple Machines Forum (SMF) version 2.0.4.
What is the Common Weakness Enumeration (CWE) for CVE-2013-7468?
CVE-2013-7468 is associated with CWE-94, which is the vulnerability type 'Code Injection.'
Is there a fix available for CVE-2013-7468?
Yes, it is recommended to update Simple Machines Forum (SMF) to a version that is not affected by CVE-2013-7468.
- collector/nvd-index
- agent/weakness
- agent/type
- vendor/simplemachines
- canonical/simplemachines simple machines forum
- version/simplemachines simple machines forum/2.0.4