CVE-2008-6657 - Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action

Back Back to CVE browser

MEDIUM

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action

Published Apr 7, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 1.14%

Description

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (7)

http://osvdb.org/50071
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/32516
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/32119
vdb-entryx_refsource_BIDExploit
http://www.simplemachines.org/community/index.php?topic=272861.0
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6619
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46343
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/6993
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/50071		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/32516		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/32119		vdb-entryx_refsource_BIDExploit
http://www.simplemachines.org/community/index.php?topic=272861.0		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6619		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46343		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/6993		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 7, 2009

Updated Aug 7, 2024

Reserved Apr 7, 2009

Link CVE-2008-6657

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-6657

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 7, 2009

Updated Aug 7, 2024

Link EUVD-2008-6619

GitHub

No data