Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2004-0248

Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum.

  • Published: Nov 23, 2004
  • Updated: Apr 13, 2023
  • CVE: CVE-2004-0248
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
phpx / phpx 3.2.3 3.2.3.x