Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Simple Machines Forum信息泄露漏洞
Vulnerability Description
Simple Machines Forum（SMF）是美国SMF团队开发的一套开源、专业级的论坛软件包，它包含一个能够完全掌控论坛界面和布局的可定制模板引擎，并提供一种可实现论坛与网站相互给合的SSI（Server Side Includes）技术。 Simple Machines Forum (SMF)1-0-5及以前版本支持avatar图像使用URL，这样远程攻击者就可以监控到论坛访客的敏感信息，比如IP地址、用户代理，正如在恶意服务器上使用PHP脚本那样。
CVSS Information
N/A
Vulnerability Type
N/A