CVE-2004-2362: Phpx

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php.

Affected products

• Phpx Phpx: version 1.0.7 only; version 1.0.10 only; version 1.0.14 only; version 2.1.0 only; version 2.2.0 only; version 2.2.1 only; …

Published 2004-12-31. Last modified 2026-06-16.