CVE-2005-1404

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

Date published : 2005-05-03

http://www.securityfocus.com/bid/13429

http://www.securityfocus.com/bid/13430