CVE-2004-2362

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php.

Affected (28)

Products: Phpx: Phpx

Phpx

1 product

Phpx

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Phpx Phpx	Version 1.0.10
Phpx Phpx	Version 1.0.14
Phpx Phpx	Version 1.0.7
Phpx Phpx	Version 2.1.0
Phpx Phpx	Version 2.2.0
Phpx Phpx	Version 2.2.1
Phpx Phpx	Version 2.2.3
Phpx Phpx	Version 2.2.4
Phpx Phpx	Version 3.0.0
Phpx Phpx	Version 3.0.1
Phpx Phpx	Version 3.0.2
Phpx Phpx	Version 3.0.3
Phpx Phpx	Version 3.0.4
Phpx Phpx	Version 3.0.5
Phpx Phpx	Version 3.0.6
Phpx Phpx	Version 3.0.7
Phpx Phpx	Version 3.1.0
Phpx Phpx	Version 3.1.1
Phpx Phpx	Version 3.1.2
Phpx Phpx	Version 3.1.3
Phpx Phpx	Version 3.1.4
Phpx Phpx	Version 3.2.0
Phpx Phpx	Version 3.2.1
Phpx Phpx	Version 3.2.2
Phpx Phpx	Version 3.2.3
Phpx Phpx	Version 3.2.4
Phpx Phpx	Version 3.2.5
Phpx Phpx	Version 3.2.6