Published: 22/12/2005 Updated: 19/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and previous versions allows remote malicious users to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpgedview phpgedview 2.61.1
phpgedview phpgedview 2.65
phpgedview phpgedview 2.65.1
phpgedview phpgedview 2.65.2
phpgedview phpgedview 2.60
phpgedview phpgedview 2.61
phpgedview phpgedview 2.52.3
phpgedview phpgedview 2.65_beta5
phpgedview phpgedview 3.3.7

<?php # ---php_ged_view_337_xplphp 1631 20/12/2005 # # # # PHPGedView <= 337 remote commands execution # # coded by rgod # # ...

NVD-CWE-Other http://rgod.altervista.org/phpgedview_337_xpl.html http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64 https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081 http://www.securityfocus.com/bid/15983 http://secunia.com/advisories/18177 http://securitytracker.com/id?1015395 http://www.osvdb.org/22009 http://www.vupen.com/english/advisories/2005/3033 https://exchange.xforce.ibmcloud.com/vulnerabilities/23871 http://www.securityfocus.com/archive/1/419906/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/1379/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-4467

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect