CVE-2004-2364

CVE-2004-2364 affects PHPX versions 3.0–3.2.6. A CSRF flaw lets remote attackers cause the administrator to trigger commands via specific admin URLs (admin/page.php, admin/news.php, admin/user.php, admin/images.php, admin/forums.php). The vulnerability’s root cause is CSRF that executes privilege...