PT-2005-2401 · Myphp · Myphp Forum

Publicado 2005-05-03 · Atualizado 2008-09-05 · CVE-2005-1404

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: MyPHP Forum version 1.0

Description: The issue allows remote attackers to spoof the username. This can be achieved by modifying the nbuser parameter to "post.php" or the sender parameter to "privmsg.php".

Recommendations: For MyPHP Forum version 1.0, consider restricting access to the "post.php" and "privmsg.php" API endpoints to minimize the risk of exploitation. Avoid using the nbuser and sender parameters in these endpoints until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-1404

Produtos afetados

Myphp Forum

Referências · 8

• 🔥 http://securityfocus.org/archive/1/397025 · Exploit
• 🔥 http://osvdb.org/15902 · Exploit
• 🔥 http://osvdb.org/15903 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1404 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1404 · Nota
• http://securityfocus.com/bid/13430 · Nota
• http://securityfocus.com/bid/13429 · Nota
• http://secunia.com/advisories/15166 · Aviso do Fabricante