← Database

CVE-2004-1950

MEDIUM CVSS: 5.0 Published: 2004-04-19 Modified: 2026-06-16

Description

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.

Affected Platforms

Phpbb Group Phpbb

Weakness Type

NVD-CWE-Other

References