CVE-2008-3072: Simple Machines Forum

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.

Affected products

• Simple Machines Simple Machines Forum: up to and including 1.0.12; up to and including 1.1.4

Published 2008-07-08. Last modified 2026-06-16.