Security Advisory
CVE-2007-3308
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack.