{"id":"CVE-2013-0192","aliases":["EUVD-2013-0228","GHSA-8v3c-5fgv-rv7x"],"status":"published","title":"File Disclosure in SMF (SimpleMachines Forum) \u003c= 2.0.3: Forum admin can read files such as the...","description":"File Disclosure in SMF (SimpleMachines Forum) \u003c= 2.0.3: Forum admin can read files such as the database config.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0376,"percentile":0.89965,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200"],"published":"2020-02-07T13:29:07Z","modified":"2026-06-16T23:48:56Z","exploits":[{"source":"exploitdb","id":"EDB-10274","title":"Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Vulnerabilities","type":"webapps","platform":"php","date":"2009-12-02","verified":true,"url":"https://www.exploit-db.com/exploits/10274"}],"products":[{"vendor":"free5gc","product":"smf"},{"vendor":"simplemachines","product":"simple_machines_forum"},{"vendor":"smf","product":"smf"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2013/02/01/4","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/01/17/5","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/01/31/1","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0192"},{"url":"https://github.com/advisories/GHSA-8v3c-5fgv-rv7x"}],"sources":{"cve":[{"id":"CVE-2013-0192","description":"File Disclosure in SMF (SimpleMachines Forum) \u003c= 2.0.3: Forum admin can read files such as the database config.","status":"published","published":"2020-02-07T13:29:07Z","modified":"2024-08-06T14:18:09.489Z","updated_at":"2026-11-02T14:34:59.551717Z"}],"euvd":[{"id":"EUVD-2013-0228","description":"File Disclosure in SMF (SimpleMachines Forum) \u003c= 2.0.3: Forum admin can read files such as the database config.","status":"published","published":"2020-02-07T13:29:07Z","modified":"2024-08-06T14:18:09Z","updated_at":"2026-11-03T01:56:46.251982Z"}],"ghsa":[{"id":"GHSA-8v3c-5fgv-rv7x","title":"File Disclosure in SMF (SimpleMachines Forum) \u003c= 2.0.3: Forum admin can read files such as the...","description":"File Disclosure in SMF (SimpleMachines Forum) \u003c= 2.0.3: Forum admin can read files such as the database config.","status":"published","published":"2022-05-05T00:29:31Z","modified":"2023-02-01T05:01:54Z","updated_at":"2026-11-02T14:49:48.187575Z"}],"nvd":[{"id":"CVE-2013-0192","description":"File Disclosure in SMF (SimpleMachines Forum) \u003c= 2.0.3: Forum admin can read files such as the database config.","status":"published","published":"2020-02-07T14:15:10.92Z","modified":"2026-06-16T23:48:56.44Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:52.934105Z"}]}}