CVE-2004-2364

None

CVSS

—

EPSS

10.7%

Published

Dec 31, 2004

CISA due date

—

The record

Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php.

Affected packages

Ecosystem	Package	Introduced	Fixed