This bug has been tested on the versions SMF 1.1.1 and 1.1 RC3. Aria-Security Team http://aria-security.net