CVE-2008-3072 Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vector...
HighCVSS 7.5
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple machines forum | <= 1.0.12 | No fix listed |
| simple machines forum | <= 1.1.4 | No fix listed |
References
- 30955 third-party-advisory
- www.simplemachines.org