Vulnerabilities In PHPX 3.26 And Earlier

Vendor : PHPX URL : http://www.phpx.org Version : PHPX 3.26 && Earlier Risk : Multiple Vulnerabilities Description: PHPX is a constantly evolving and changing Content Management System CMS. PHPX is highly customizable and high powered all in one system. PHPX provides content management combined...

PHPX 3.x - news.php Cross-Site Request Forgery Arbitrary Command Execution

PHPX 3.x - news.php Cross-Site Request Forgery Arbitrary Command Execution source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly...

PHPX 3.x - '/user.php' Cross-Site Request Forgery / Arbitrary Command Execution

source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative commands. This issue could permit a remot...

PHPX 3.x - '/images.php' Cross-Site Request Forgery / Arbitrary Command Execution

source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative commands. This issue could permit a remot...

PHPX 3.x - page.php Cross-Site Request Forgery Arbitrary Command Execution

PHPX 3.x - page.php Cross-Site Request Forgery Arbitrary Command Execution source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly...

PHPX 3.x - images.php Cross-Site Request Forgery Arbitrary Command Execution

PHPX 3.x - images.php Cross-Site Request Forgery Arbitrary Command Execution source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properl...

PHPX 3.x - forums.php Cross-Site Request Forgery Arbitrary Command Execution

PHPX 3.x - forums.php Cross-Site Request Forgery Arbitrary Command Execution source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properl...

PHPX 3.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10283/info It has been reported that PHPX is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. These issues could permit a remote attacker to creat...

PHPX 3.x - '/page.php' Cross-Site Request Forgery / Arbitrary Command Execution

source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative commands. This issue could permit a remot...

PHPX 3.26 - Multiple Vulnerabilities

PHPX 3.26 - Multiple Vulnerabilities PHPX Multiple Vulnerabilities Vendor: PHPX Product: PHPX Version: ","","",""; foreach$checkArray as $c...

PHPX < 3.26 - Multiple Vulnerabilities

PHPX Multiple Vulnerabilities Vendor: PHPX Product: PHPX Version: ","","",""; foreach$checkArray as $c if substrcount$SERVER"REQUESTURI", $c...

CVE-2004-0249

CVE-2004-0249 affects PHPX 2.0–3.2.4. The vulnerability arises from allowing an attacker to modify the cookie PXL to reference a different userID, enabling remote access to other accounts. This leads to complete confidentiality and integrity impact. The NVD metrics indicate a network-accessible, ...

CVE-2004-0248

Cross-site scripting vulnerability XSS in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into 1 keywords argument of main.inc.php, 2 body argument of help.inc.php, or 3 the subject field in Personal Messages and Forum...

CVE-2004-0248

CVE-2004-0248 describes a cross-site scripting (XSS) vulnerability in PHPX 3.2.3. The issue allows remote attackers to run arbitrary script as another user by injecting HTML or script into three inputs: the keywords argument of main.inc.php, the body argument of help.inc.php, or the subject field...

CVE-2004-0249

PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID...

CVE-2004-0248: Undefined Security Weakness

Cross-site scripting vulnerability XSS in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into 1 keywords argument of main.inc.php, 2 body argument of help.inc.php, or 3 the subject field in Personal Messages and Forum...

CVE-2004-0249: Undefined Security Weakness

PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID...

PHPX 2.x - 3.2.4

PHPX 3.2.4 http://www.phpx.org Versions Affected: PHPX 2.x - 3.2.4 Type of bug: Session Hi-jacking/Admin Access via Cookies Impact: Ability to steal another users account Found-by: HelloWorld Ryan Wray Vendor: Notified Table Of Contents ===================== 1 The Program 2 The Problem 3 The Proo...

phpx324.txt

PHPX 3.2.4 http://www.phpx.org Versions Affected: PHPX 2.x - 3.2.4 Type of bug: Session Hi-jacking/Admin Access via Cookies Impact: Ability to steal another users account Found-by: HelloWorld Ryan Wray Vendor: Notified Table Of Contents ===================== 1 The Program 2 The Problem 3 The Proo...

Multiple Vulnerabilities in PHPX

Title: Multiple Vulnerabilities in PHPX By: Manuel Lpez [email protected] FROM IST libres.irc-hispano.org, IST Efnet. Url: http://www.phpx.org Description: PHPX is a web portal system, blog, Content Management System CMS, forums, and more. PHPX is designed to allow everyone to be able to have...