CVE-2004-2362 | BDVDB-2026-12004 Detail

Description#

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.phpx.org/project.php?action=view&project_id=1
https://exchange.xforce.ibmcloud.com/vulnerabilities/16064
http://securitytracker.com/id?1010061
http://www.securityfocus.com/archive/1/362230
http://www.osvdb.org/5906
http://secunia.com/advisories/11554

Exploit#

No public exploit known

History#

Version 12005-08-16Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.