CVE-2004-2364 : 상세 정보

Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php.

메트릭

EPSS

EPSS 점수

EPSS 백분위수

익스플로잇 정보

Exploit Database EDB-ID : 24092

게시일 : 2004-05-04 22h00 +00:00
저자 : JeiAr
EDB 검증됨 : Yes

Exploit Database EDB-ID : 24091

게시일 : 2004-05-04 22h00 +00:00
저자 : JeiAr
EDB 검증됨 : Yes

Exploit Database EDB-ID : 24089

게시일 : 2004-05-04 22h00 +00:00
저자 : JeiAr
EDB 검증됨 : Yes

Exploit Database EDB-ID : 24088

게시일 : 2004-05-04 22h00 +00:00
저자 : JeiAr
EDB 검증됨 : Yes

Exploit Database EDB-ID : 24090

게시일 : 2004-05-04 22h00 +00:00
저자 : JeiAr
EDB 검증됨 : Yes

Exploit Database EDB-ID : 43812

게시일 : 2004-05-03 22h00 +00:00
저자 : GulfTech Security
EDB 검증됨 : No

언급된 제품

구성 0

Phpx>>Phpx >> Version 3.0.0

Phpx>>Phpx >> Version 3.0.1

Phpx>>Phpx >> Version 3.0.2

Phpx>>Phpx >> Version 3.0.3

Phpx>>Phpx >> Version 3.0.4

Phpx>>Phpx >> Version 3.0.5

Phpx>>Phpx >> Version 3.0.6

Phpx>>Phpx >> Version 3.0.7

Phpx>>Phpx >> Version 3.1.0

Phpx>>Phpx >> Version 3.1.1

Phpx>>Phpx >> Version 3.1.2

Phpx>>Phpx >> Version 3.1.3

Phpx>>Phpx >> Version 3.1.4

Phpx>>Phpx >> Version 3.2.0

Phpx>>Phpx >> Version 3.2.1

Phpx>>Phpx >> Version 3.2.2

Phpx>>Phpx >> Version 3.2.3

Phpx>>Phpx >> Version 3.2.4

Phpx>>Phpx >> Version 3.2.5

Phpx>>Phpx >> Version 3.2.6

참고 자료