Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Numeric Errors Vulnerability - CVE-2008-4107 - Vulnerability Database
PHP

PHP Numeric Errors Vulnerability - CVE-2008-4107

Medium
Reference: CVE-2008-4107
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-4107
Title: PHP Numeric Errors Vulnerability
Overview:

The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality as demonstrated by the password-reset functionality in Joomla 1.5.x and WordPress before 2.6.2 a different vulnerability than CVE-2008-2107 CVE-2008-2108 and CVE-2008-4102.