Vulnerabilities > CVE-2004-0127 - Unspecified vulnerability in PHPgedview

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
phpgedview
nessus
NVD
Published: 2004-03-03
Updated: 2024-11-20

Summary

Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.

Vulnerable Configurations

Part Description Count
Application
Phpgedview
6

Nessus

NASL familyCGI abuses
NASL idPHPGEDVIEW_DIRECTORY_TRAVERSAL.NASL
descriptionA vulnerability exists in the installed version of PhpGedView that may allow an attacker to read arbitrary files on the remote web server with the privileges of the web user. Another vulnerability could allow an attacker to include arbitrary PHP files hosted on a third-party website.
last seen2020-06-01
modified2020-06-02
plugin id12034
published2004-02-02
reporterThis script is Copyright (C) 2004-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/12034
titlephpGedView Arbitrary File Access / Remote File Inclusion

References