CVE-2007-3942

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-21 · updated 2026-06-16

Description

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourcedir and actionArray are defined before use

Affected products

Simple Machines Forum: 1.1.3

References

http://www.securityfocus.com/archive/1/473866/100/0/threaded
http://www.securityfocus.com/archive/1/473991/100/0/threaded
http://www.securityfocus.com/archive/1/480572/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/35451
http://www.securityfocus.com/archive/1/473866/100/0/threaded
http://www.securityfocus.com/archive/1/473991/100/0/threaded
http://www.securityfocus.com/archive/1/480572/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/35451

Get alerted when CVE-2007-3942 or the next vulnerability affects your stack