Unscored CVE-2004-1950 EUVD-2004-1942GHSA-553c-w3pr-f6rh

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP…

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.

References

11434 third-party-advisory
20040419 phpBB 2.0.8a and lower - IP spoofing vulnerability mailing-list
phbb-common-ip-spoofing(15909) vdb-entry
10170 vdb-entry
20040419 Re: phpBB 2.0.8a and lower - IP spoofing vulnerability mailing-list