CVE-2013-7466: Simplemachines Simple Machines Forum

High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days.

Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.

Affected products

Published 2019-03-07. Last modified 2026-06-17.