CVE-2004-0128 | BDVDB-2026-7171 Detail

Description#

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/352355
http://secunia.com/advisories/10753/
https://exchange.xforce.ibmcloud.com/vulnerabilities/14987
http://www.securityfocus.com/bid/9531
http://sourceforge.net/project/shownotes.php?release_id=141517
http://www.osvdb.org/3769

Exploit#

No public exploit known

History#

Version 12004-09-01Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.