CVE-2013-0192 is a file disclosure vulnerability affecting SimpleMachines Forum (SMF) versions 2.0.3 and earlier, allowing an authenticated forum administrator to read arbitrary files, including sensitive database configuration files. With a CVSS score of 4.9 (Medium), this vulnerability has a low attack complexity and high confidentiality impact, but requires high privileges. While no active exploitation or Metasploit/Nuclei modules are reported, an older ExploitDB entry for multiple SMF vulnerabilities exists, though not directly for this CVE. Community discussion and media coverage for this specific CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0.3CPE matchmatch criteria | cpe:2.3:a:simplemachines:simple_machines_forum:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.