NVD

Id
6390  
Name
CVE-2008-6659  
Description
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during a jsoption action, related to Sources/QueryString.php and Sources/Themes.php, as demonstrated by a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-03  
Published
2009-04-07  
Modified Date
2009-07-23  
Seq
2008-6659  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
37345 6390 CVE-2008-6659 7011  View
37346 6390 CVE-2008-6659 32139  View
37347 6390 CVE-2008-6659 http://www.simplemachines.org/community/index.php?topic=272861.0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51321 JVNDB-2008-006631 SMF の index.php におけるディレクトリトラバーサルの脆弱性 Simple Machines Forum (SMF) の index.php は、Sources/QueryString.php および Sources/Themes.php に関する不備があるため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-6659 36772 CVE-2008-6659 6390 5.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006631.html 2008-11-07 2012-12-20 View