CVE-2004-0249
PHPX <3.2.4 - RCE
Title source: llmDescription
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Manuel L?pez · phpwebappsphp
https://www.exploit-db.com/exploits/23644
References (6)
Scores
EPSS
0.0566
EPSS Percentile
90.4%
Details
Status
published
Products (1)
phpx/phpx
3.2.3
Published
Nov 23, 2004
Tracked Since
Feb 18, 2026