Published: 31/12/2004 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 530

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 up to and including 3.2.6 allows remote malicious users to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpx phpx 3.2.4
phpx phpx 3.2.5
phpx phpx 3.1.0
phpx phpx 3.1.2
phpx phpx 3.0.4
phpx phpx 3.0.0
phpx phpx 3.1.4
phpx phpx 3.0.2
phpx phpx 3.0.1
phpx phpx 3.0.6
phpx phpx 3.2.0
phpx phpx 3.1.3
phpx phpx 3.2.2
phpx phpx 3.0.7
phpx phpx 3.1.1
phpx phpx 3.2.6
phpx phpx 3.2.3
phpx phpx 3.0.5
phpx phpx 3.2.1
phpx phpx 3.0.3

source: wwwsecurityfocuscom/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities These issues are due to a failure of the application to properly validate access to administrative commands This issue could permit a remote attacker to create a malicious URI link or emb ...

PHPX Multiple Vulnerabilities Vendor: PHPX Product: PHPX Version: <= 326 Website: wwwphpxorg BID: 10283 10284 CVE: CVE-2004-2364 OSVDB: 5903 5904 5905 5906 5907 5908 5909 5910 5911 SECUNIA: 11554 PACKETSTORM: 33251 Description: PHPX is a constantly evolving and changing Content Management System (CMS) PHPX is highly customizab ...

source: wwwsecurityfocuscom/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities These issues are due to a failure of the application to properly validate access to administrative commands This issue could permit a remote attacker to create a malicious URI link or embed a ...

source: wwwsecurityfocuscom/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities These issues are due to a failure of the application to properly validate access to administrative commands This issue could permit a remote attacker to create a malicious URI link or embed ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/362230 http://www.phpx.org/project.php?action=view&project_id=1 http://www.securityfocus.com/bid/10284 http://www.osvdb.org/5907 http://www.osvdb.org/5908 http://www.osvdb.org/5909 http://www.osvdb.org/5910 http://www.osvdb.org/5911 http://securitytracker.com/id?1010061 http://secunia.com/advisories/11554 https://nvd.nist.gov https://www.exploit-db.com/exploits/24092/

CVE-2004-2364

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect