Total vulnerabilities in the database
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.
CVSS v2:
No CWE or OWASP classifications available.