CVE-2004-0249 PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.
HighCVSS 10.0
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpx | = 3.2.3 | No fix listed |
References
- 20040316 PHPX 2.x - 3.2.4 mailing-list
- 20040203 Multiple Vulnerabilities in PHPX mailing-list
- 10797 third-party-advisory
- 9569 exploit patch vdb-entry vendor-advisory
- phpx-cookie-account-hijacking(15052) vdb-entry
- phpx-session-hijack(15512) vdb-entry