cve/2013/CVE-2013-7236.md

CVE-2013-7236

Description

Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.

POC

Reference

• http://seclists.org/fulldisclosure/2013/Dec/83
• http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/

Github

No PoCs found on GitHub currently.