Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpgedview phpgedview 2.61 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2004-0127
Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and previous versions allows remote malicious users to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.
Phpgedview Phpgedview 2.65
Phpgedview Phpgedview 2.65.1
Phpgedview Phpgedview 2.61
Phpgedview Phpgedview 2.61.1
Phpgedview Phpgedview 2.52.3
Phpgedview Phpgedview 2.60
7.5
CVSSv2
CVE-2004-0128
PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and previous versions allows remote malicious users to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains...
Phpgedview Phpgedview 2.65.1
Phpgedview Phpgedview 2.61.1
Phpgedview Phpgedview 2.65
Phpgedview Phpgedview 2.60
Phpgedview Phpgedview 2.61
Phpgedview Phpgedview 2.52.3
1 EDB exploit
5
CVSSv2
CVE-2004-0033
admin.php in PHPGEDVIEW 2.61 allows remote malicious users to obtain sensitive information via an action parameter with a phpinfo command.
Phpgedview Phpgedview 2.61
1 EDB exploit
7.5
CVSSv2
CVE-2004-0030
PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote malicious users to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web s...
Phpgedview Phpgedview 2.61
1 EDB exploit
7.5
CVSSv2
CVE-2004-0031
PHPGEDVIEW 2.61 allows remote malicious users to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.
Phpgedview Phpgedview 2.61
6.8
CVSSv2
CVE-2004-0032
Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote malicious users to inject arbitrary HTML and web script via the firstname parameter.
Phpgedview Phpgedview 2.61
1 EDB exploit
7.5
CVSSv2
CVE-2005-4469
Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and previous versions allow remote malicious users to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_...
Phpgedview Phpgedview 2.61
Phpgedview Phpgedview 2.61.1
Phpgedview Phpgedview 2.65.2
Phpgedview Phpgedview 2.65 Beta5
Phpgedview Phpgedview 2.65
Phpgedview Phpgedview 2.65.1
Phpgedview Phpgedview 2.52.3
Phpgedview Phpgedview 2.60
Phpgedview Phpgedview
5
CVSSv2
CVE-2005-4467
Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and previous versions allows remote malicious users to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.
Phpgedview Phpgedview 2.61.1
Phpgedview Phpgedview 2.65
Phpgedview Phpgedview 2.65.1
Phpgedview Phpgedview 2.65.2
Phpgedview Phpgedview 2.60
Phpgedview Phpgedview 2.61
Phpgedview Phpgedview 2.52.3
Phpgedview Phpgedview 2.65 Beta5
Phpgedview Phpgedview 3.3.7
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-26978
CVE-2024-26982
wireless
CVE-2023-6949
CVE-2024-26980
CVE-2024-32766
CVE-2024-26939
cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
Vulmon