Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2004-2363

Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting (XSS) attacks via hex-encoded tags, which bypass the check for literal "<", ">", "(", and ")" characters, as demonstrated using the limit parameter to forums.php and a variety of other vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 66.9%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2004-2363
  • Phpx » Phpx » Version: 3.0.0
    cpe:2.3:a:phpx:phpx:3.0.0
  • Phpx » Phpx » Version: 3.0.1
    cpe:2.3:a:phpx:phpx:3.0.1
  • Phpx » Phpx » Version: 3.0.2
    cpe:2.3:a:phpx:phpx:3.0.2
  • Phpx » Phpx » Version: 3.0.3
    cpe:2.3:a:phpx:phpx:3.0.3
  • Phpx » Phpx » Version: 3.0.4
    cpe:2.3:a:phpx:phpx:3.0.4
  • Phpx » Phpx » Version: 3.0.5
    cpe:2.3:a:phpx:phpx:3.0.5
  • Phpx » Phpx » Version: 3.0.6
    cpe:2.3:a:phpx:phpx:3.0.6
  • Phpx » Phpx » Version: 3.0.7
    cpe:2.3:a:phpx:phpx:3.0.7
  • Phpx » Phpx » Version: 3.1.0
    cpe:2.3:a:phpx:phpx:3.1.0
  • Phpx » Phpx » Version: 3.1.1
    cpe:2.3:a:phpx:phpx:3.1.1
  • Phpx » Phpx » Version: 3.1.2
    cpe:2.3:a:phpx:phpx:3.1.2
  • Phpx » Phpx » Version: 3.1.3
    cpe:2.3:a:phpx:phpx:3.1.3
  • Phpx » Phpx » Version: 3.1.4
    cpe:2.3:a:phpx:phpx:3.1.4
  • Phpx » Phpx » Version: 3.2.0
    cpe:2.3:a:phpx:phpx:3.2.0
  • Phpx » Phpx » Version: 3.2.1
    cpe:2.3:a:phpx:phpx:3.2.1
  • Phpx » Phpx » Version: 3.2.2
    cpe:2.3:a:phpx:phpx:3.2.2
  • Phpx » Phpx » Version: 3.2.3
    cpe:2.3:a:phpx:phpx:3.2.3
  • Phpx » Phpx » Version: 3.2.4
    cpe:2.3:a:phpx:phpx:3.2.4
  • Phpx » Phpx » Version: 3.2.5
    cpe:2.3:a:phpx:phpx:3.2.5
  • Phpx » Phpx » Version: 3.2.6
    cpe:2.3:a:phpx:phpx:3.2.6


Products
Pricing
Contact Us

Shodan ® - All rights reserved