$ cve CVE-2004-0249 JSON

CVE-2004-0249 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 4.9% (pctl 92)

Patch early

A public exploit exists.

PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	4.93% — more likely to be exploited than 92% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-11-23
Last modified	2026-06-16

Vendor	Product
phpx	phpx

Source	Title	Date
exploit-db	PHPX 3.2.3 - Multiple Vulnerabilities	2004-02-03