Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0249
cve-2004-0249
phpx
remote attackers
account access
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.091 Low
EPSS
Percentile
94.5%
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie’s PXL variable to reference another userID.
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.091 Low
EPSS
Percentile
94.5%