7.5
CVE-2008-3072
- EPSS 0.99%
- Veröffentlicht 08.07.2008 18:41:00
- Zuletzt bearbeitet 16.06.2026 22:55:01
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSimple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Simple Machines ≫ Simple Machines Forum Version <= 1.0.12
Simple Machines ≫ Simple Machines Forum Version <= 1.1.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.99% | 0.581 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0
http://secunia.com/advisories/30955