← Back

CVE-2005-4687

nvd nist
Published: Dec 31, 2005Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.

Affected (21)

1 product
Blog Cms
1 product
Punbb
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
F Art Agency
Version 3.0
Version 3.1.2
Version 3.1.3
Version 3.1.4
Version 3.1
Version 3.6.2
Version 3.6.4
Version 4.0.0
Version 4.0.0a
Version 4.0.0b
Version 4.0.0c
Version 4.0.0d
Punbb
Version 1.2.1
Version 1.2.2
Version 1.2.3
Version 1.2.4
Version 1.2.5
Version 1.2.6
Version 1.2.7
Version 1.2.8
Version 1.2.9

References (8)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.