CVE-2004-2362

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:phpx:phpx:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:phpx:phpx:3.2.6:*:*:*:*:*:*:*

History

14 Feb 2024, 01:17

Type Values Removed Values Added
References () http://www.phpx.org/project.php?action=view&project_id=1 - Patch () http://www.phpx.org/project.php?action=view&project_id=1 - Patch, URL Repurposed

Information

Published : 2004-12-31 05:00

Updated : 2024-02-14 01:17


NVD link : CVE-2004-2362

Mitre link : CVE-2004-2362

CVE.ORG link : CVE-2004-2362


JSON object : View

Products Affected

phpx

  • phpx