CVE-2004-2363

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting (XSS) attacks via hex-encoded tags, which bypass the check for literal "<", ">", "(", and ")" characters, as demonstrated using the limit parameter to forums.php and a variety of other vectors.

Affected (20)

Products: Phpx: Phpx

Phpx

1 product

Phpx

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Phpx Phpx	Version 3.0.0
Phpx Phpx	Version 3.0.1
Phpx Phpx	Version 3.0.2
Phpx Phpx	Version 3.0.3
Phpx Phpx	Version 3.0.4
Phpx Phpx	Version 3.0.5
Phpx Phpx	Version 3.0.6
Phpx Phpx	Version 3.0.7
Phpx Phpx	Version 3.1.0
Phpx Phpx	Version 3.1.1
Phpx Phpx	Version 3.1.2
Phpx Phpx	Version 3.1.3
Phpx Phpx	Version 3.1.4
Phpx Phpx	Version 3.2.0
Phpx Phpx	Version 3.2.1
Phpx Phpx	Version 3.2.2
Phpx Phpx	Version 3.2.3
Phpx Phpx	Version 3.2.4
Phpx Phpx	Version 3.2.5
Phpx Phpx	Version 3.2.6