| Package | Affected versions | Patched versions |
|---|---|---|
| myphp forum | = 1.0= 2.0= 3.0 |
MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free