CVE-2007-3308 | BDVDB-2026-24803 Detail

Description#

Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/34907
http://securitytracker.com/id?1018260
http://www.securityfocus.com/archive/1/471641/100/0/threaded
http://osvdb.org/40617
http://securityvulns.ru/Rdocument271.html

Exploit#

No public exploit known

History#

Version 12007-06-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.