← All advisories

Unrated severityNVD Advisory· Published Nov 23, 2004· Updated Jun 16, 2026

CVE-2004-0249

CVE-2004-0249

Description

PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Phpx/Phpx2 versions
cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*
- (no CPE)range: >=2.0, <=3.2.4

Patches

Vulnerability mechanics

References

6

www.securityfocus.com/bid/9569nvdExploitPatchVendor Advisory
archives.neohapsis.com/archives/bugtraq/2004-03/0154.htmlnvd
marc.infonvd
secunia.com/advisories/10797/nvd
exchange.xforce.ibmcloud.com/vulnerabilities/15052nvd
exchange.xforce.ibmcloud.com/vulnerabilities/15512nvd

News mentions

0

No linked articles in our index yet.