CVE-2004-0249: Phpx

High severity, CVSS 10.0. EPSS: 4.9% chance of exploitation in the next 30 days.

PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.

Affected products

• Phpx Phpx: version 3.2.3 only

Published 2004-11-23. Last modified 2026-06-16.