CVE:CVE-2005-1404
CNNVD:CNNVD-200505-861
MyPHP Forum 1.0使得远程攻击者可以通过修改(1)传给post.php的nbuser参数或(2)传给privmsg.php的sender参数来进行用户名欺骗。
solution:Upgrade myphp_forum myphp_forum to a higher version than 1.0,2.0,3.0,and avoid the version 1.0,2.0,3.0