Unscored CVE-2005-1404 EUVD-2005-1407GHSA-pq86-qv99-3c5r

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to …

Published May 3, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

References

20050426 myPHP Forum v3 (possible v1 & 2 also) Identification 'spoof' mailing-list
15903 vdb-entry
15902 vdb-entry
13430 vdb-entry
15166 third-party-advisory
13429 vdb-entry