CVE

Id
10376  
CVE No.
CVE-2004-1950  
Status
Candidate  
Description
phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments