← Database

CVE-2005-1404

MEDIUM CVSS: 5.0 Published: 2005-05-03 Modified: 2026-06-16

Description

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

Affected Platforms

Myphp Forum Myphp Forum

Weakness Type

NVD-CWE-Other

References