CVE-2013-7468 describes a PHP Code Injection vulnerability in Simple Machines Forum (SMF) version 2.0.4, specifically exploitable through the index.php?action=admin;area=languages;sa=editlang dictionary parameter. This vulnerability carries a high severity CVSS score of 8.1, indicating a critical risk due to its network-based attack vector, high impact on confidentiality, integrity, and availability, and low attack complexity. While no public exploit intelligence like Metasploit modules or ExploitDB entries are available, and there's no evidence of active exploitation or significant community discussion, the potential for remote code execution remains a serious concern for unpatched SMF installations.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.4CPE matchmatch criteria | cpe:2.3:a:simplemachines:simple_machines_forum:2.0.4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.