CVE-2004-2363

PHPX 3.0–3.2.6 contains a Validate-Before-Canonicalize flaw in functions.inc.php: checkURI can be bypassed with hex-encoded tags, enabling remote XSS via the limit parameter to forums.php and similar vectors. Impact is XSS without bypassing literal character checks. Affected component/function: c...

CVE-2005-2363

CVE-2005-2363 is reported for Ethereal (Wireshark) versions 0.8.15–0.10.11, where multiple dissectors (SMPP, 802.3, DHCP, MEGACO, H1) may cause a remote denial of service via an unknown attack vector, potentially via an infinite loop. The vulnerability is categorized with a CVSS v2 base score of ...

CVE-2004-2363

Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting XSS attacks via hex-encoded tags, which bypass the check for literal "", "", and "" characters, as demonstrated using the limi...