CVE-2004-2362

CVE-2004-2362 describes a vulnerability in PHPX versions 3.2.6 and earlier, where remote attackers can uncover the physical path of the PHPX installation. This is achieved by providing a null or invalid value to the 'limit' parameter, which causes a database error message to reveal the pathname, specifically demonstrated with forums.php. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and requiring no authentication, leading to a potential disclosure of sensitive information (C:P). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.