CVE-2005-1404 in MyPHP Forum

Summary

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

Reservation

05/03/2005

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
82464	MyPHP Forum privmsg.php Username authentication spoofing	290	Proof-of-Concept	Not defined	CVE-2005-1404
25030	MyPHP Forum post.php authentication spoofing	290	Proof-of-Concept	Not defined	CVE-2005-1404