Vulnerabilities > CVE-2008-3072 - Numeric Errors vulnerability in Simple Machines Simple Machines Forum

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
simple-machines
CWE-189

Summary

Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.

Vulnerable Configurations

Part Description Count
Application
Simple_Machines
1

Common Weakness Enumeration (CWE)