CVE-2008-4125

The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive…

published September 18, 2008

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01631 · 76.0th percentile
Published
2008-09-18T17:47Z
EPSS history
Timeline
  • 18 SEP 17:47Z
    The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive…
    cvelistv5