PT-2004-1403 · Phpx · Phpx

Published 2004-03-18 · Updated 2017-07-11 · CVE-2004-0249

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHPX versions 2.0 through 3.2.4

Description The issue allows remote attackers to gain access to other accounts. This is achieved by modifying the cookie's PXL variable to reference another userID.

Recommendations For PHPX versions 2.0 through 3.2.4, consider restricting access to the cookie's PXL variable to prevent modification and minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-0249

Affected Products

Phpx

References · 8

• 🔥 https://exploit-db.com/exploits/23644 · Exploit
• 🔥 http://securityfocus.com/bid/9569 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0249 · Security Note
• http://secunia.com/advisories/10797 · Note
• http://marc.info/?l=bugtraq&m=107586932324901&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15052 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15512 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html · Note