CVE-2011-1131 in SMF
Summary
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
03/02/2011
Disclosure
06/20/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 57741 | Simplemachines SMF Search.php PlushSearch2 information disclosure | 200 | Not defined | Official fix | CVE-2011-1131 |