Security Advisory
CVE-2005-1404
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.