CVE-2005-4687
CVE-2005-4687 is a medium-severity vulnerability in F-art Agency Blog Cms with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (69th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: F-art Agency Blog Cms
- Published:
- Last modified:
Description
PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
Frequently asked questions
- What is CVE-2005-4687?
- PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
- How severe is CVE-2005-4687?
- CVE-2005-4687 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2005-4687 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-4687?
- CVE-2005-4687 primarily affects F-art Agency Blog Cms. In total, 21 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-4687?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-4687 published?
- CVE-2005-4687 was published on 2005-12-31 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/17425
- http://secunia.com/advisories/17433
- http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
- http://www.securityfocus.com/bid/15326
Affected products (21)
- cpe:2.3:a:f-art_agency:blog_cms:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:3.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:3.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:3.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:4.0.0a:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:4.0.0b:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:4.0.0c:*:*:*:*:*:*:*
- cpe:2.3:a:f-art_agency:blog_cms:4.0.0d:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*
More vulnerabilities in F-art Agency Blog Cms
- CVE-2006-4748 — High (CVSS 7.5): Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands…
- CVE-2006-3364 — High (CVSS 7.5): SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to…
- CVE-2006-6035 — Medium (CVSS 6.8): Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject…