| Package | Affected versions | Patched versions |
|---|---|---|
| phpbb | = 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.6c= 2.0.6d= 2.0.7= 2.0.7a= 2.0.8= 2.0.8a |
phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free