vulnwire
5.0med

CVE-2004-23646 exploits

Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs th…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
10.7%
percentile 96%
Public exploits
6
Exploit-DB

Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php.

Exploit prediction (EPSS)

10.71% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-43812 PHPX < 3.26 - Multiple Vulnerabilities · webapps · 2004-05-04
  • EDB-24092 PHPX 3.x - '/forums.php' Cross-Site Request Forgery / Arbitrary Command Execution · webapps · 2004-05-05
  • EDB-24091 PHPX 3.x - '/images.php' Cross-Site Request Forgery / Arbitrary Command Execution · webapps · 2004-05-05
  • EDB-24090 PHPX 3.x - '/user.php' Cross-Site Request Forgery / Arbitrary Command Execution · webapps · 2004-05-05
  • EDB-24089 PHPX 3.x - '/news.php' Cross-Site Request Forgery / Arbitrary Command Execution · webapps · 2004-05-05
  • EDB-24088 PHPX 3.x - '/page.php' Cross-Site Request Forgery / Arbitrary Command Execution · webapps · 2004-05-05

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

References

  • phpx.org /project.php?action=view&project_id=1 · x_refsource_MISC, x_transferred
  • osvdb.org /5909 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securitytracker.com /id?1010061 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • osvdb.org /5908 · vdb-entry, x_refsource_OSVDB, x_transferred
  • osvdb.org /5911 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/10284 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /5910 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /archive/1/362230 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/11554 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /5907 · vdb-entry, x_refsource_OSVDB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.