Security Advisory
CVE-2011-1127
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.