Security Advisory
CVE-2016-5726
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.