← Back

CVE-2011-1131

nvd nist
Published: Jun 21, 2011Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.

Affected (57)

Products: Simplemachines: Smf
Smf
Configuration A
47 vulnerable
Vulnerable SoftwareAffected Versions
Simplemachines
Up to 1.1.12
Version 1.0.10
Version 1.0.12
Version 1.0.13
Version 1.0.14
Version 1.0.15
Version 1.0.16
Version 1.0.17
Version 1.0.18
Version 1.0.19
Version 1.0.1
Version 1.0.20
Version 1.0.21
Version 1.0.2
Version 1.0.3
Version 1.0.4
Version 1.0.5
Version 1.0.6
Version 1.0.7
Version 1.0.8
Version 1.0.9
Version 1.0
Version 1.0 beta4.1
Version 1.0 beta4
Version 1.0 beta5
Version 1.0 beta6
Version 1.0 rc1
Version 1.0 rc2
Version 1.1.10
Version 1.1.11
Version 1.1.1
Version 1.1.2
Version 1.1.3
Version 1.1.4
Version 1.1.5
Version 1.1.6
Version 1.1.7
Version 1.1.8
Version 1.1.9
Version 1.1
Version 1.1 beta1
Version 1.1 beta2
Version 1.1 beta3
Version 1.1 beta4
Version 1.1 rc1
Version 1.1 rc2
Version 1.1 rc3
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Simplemachines
Version 2.0 beta1
Version 2.0 beta2.1
Version 2.0 beta2
Version 2.0 beta3.1
Version 2.0 beta3
Version 2.0 beta4
Version 2.0 rc1
Version 2.0 rc2
Version 2.0 rc3
Version 2.0 rc4

Timeline

No history available yet.