CVE-2005-1404: Myphp Forum

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

Affected products

• Myphp Forum Myphp Forum: version 1.0 only; version 2.0 only; version 3.0 only

Published 2005-05-03. Last modified 2026-06-16.