CVE-2004-1950: Phpbb Group Phpbb

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.

Affected products

• Phpbb Group Phpbb: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2004-04-19. Last modified 2026-06-16.