MyBB » Security Issues

All random values generated in MyBB are predictable because PHP's RNG (random number generator) does not generate cryptographically secure random numbers.

For example, new activation code/password is created with mt_rand() and is therefore predictable from the outside (because mt_srand() is also used by MyBB or otherwise seeded internally in PHP)
Because it is predictable an attacker can just reset the password for any account and then login via an aided bruteforce attempt for the password.

Solution is so create our own cryptographically secure random number generator.