Vulnerabilities > CVE-2007-3308 - Remote Security vulnerability in Simple Machines Simple Machines Forum 1.1.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |