CVE-2004-2363 | BDVDB-2026-12005 Detail

Description#

Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting (XSS) attacks via hex-encoded tags, which bypass the check for literal "<", ">", "(", and ")" characters, as demonstrated using the limit parameter to forums.php and a variety of other vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.phpx.org/project.php?action=view&project_id=1
http://www.securityfocus.com/bid/10283
https://exchange.xforce.ibmcloud.com/vulnerabilities/16065
http://www.securityfocus.com/archive/1/362230

Exploit#

No public exploit known

History#

Version 12005-08-16Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.