CVE-2004-2364

Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php.

• http://secunia.com/advisories/11554
• http://securitytracker.com/id?1010061
• http://www.osvdb.org/5907
• http://www.osvdb.org/5908
• http://www.osvdb.org/5909
• http://www.osvdb.org/5910
• http://www.osvdb.org/5911
• http://www.phpx.org/project.php?action=view&project_id=1Patch, URL Repurposed
• http://www.securityfocus.com/archive/1/362230Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/10284Exploit, Patch
• http://secunia.com/advisories/11554
• http://securitytracker.com/id?1010061
• http://www.osvdb.org/5907
• http://www.osvdb.org/5908
• http://www.osvdb.org/5909
• http://www.osvdb.org/5910
• http://www.osvdb.org/5911
• http://www.phpx.org/project.php?action=view&project_id=1Patch, URL Repurposed
• http://www.securityfocus.com/archive/1/362230Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/10284Exploit, Patch

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2358Cross-site scripting (XSS) vulnerability in admin_words.php …
• CVE-2004-2359Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10…
• CVE-2004-2360Targem Battle Mages 1.0 allows remote attackers to cause a d…
• CVE-2004-2361Digital Reality game engine, as used in Haegemonia 1.0 throu…
• CVE-2004-2362PHPX 3.2.6 and earlier allows remote attackers to obtain the…
• CVE-2004-2363Validate-Before-Canonicalize vulnerability in the checkURI f…
• CVE-2004-2365Memory leak in Microsoft Windows XP and Windows Server 2003 …
• CVE-2004-2366Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.…
• CVE-2004-2367The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and …
• CVE-2004-2368PHP remote file inclusion vulnerability in header.php in Opt…
• CVE-2004-2369Directory traversal vulnerability in webadmin.nsf for Lotus …
• CVE-2004-2370Stack-based buffer overflow in Trillian 0.71 through 0.74f a…