• info
• discussion
• exploit
• solution
• references

PHP MCrypt_Create_IV Insecure Encryption Weakness

An attacker can exploit this issue by using brute-force techniques to guess the value of the initialization vector.