Lucene search
MitreCVELIST:CVE-2018-10305HistoryApr 24, 2018 - 2:00 a.m.
CVE-2018-10305
2018-04-2402:00:00
mitre
www.cve.org
4
The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not properly use the possible_users variable in a query, which might allow attackers to bypass intended access restrictions.
Related
nvd
nvd
CVE-2018-10305
2018-04-24 02:29:00
prion
prion
Design/Logic Flaw
2018-04-24 02:29:00
cve
cve
CVE-2018-10305
2018-04-24 02:29:00
openvas
openvas
Simple Machines Forum Security Bypass Vulnerability (May 2018)
2018-05-14 00:00:00