CVE:CVE-2004-1950
CNNVD:CNNVD-200404-068
phpBB 2.0.8a和早期版本信任HTTP头中X-Forwarded-For的IP地址，远程攻击者可以借助该漏洞欺骗IP地址。
solution:Upgrade phpbb_group phpbb to a higher version than 2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.6c,2.0.6d,2.0.7,2.0.7a,2.0.8,2.0.8a,and avoid the version 2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.6c,2.0.6d,2.0.7,2.0.7a,2.0.8,2.0.8a