Phpgedview - vulnerabilities (CVEs)
16 CVEs in 1 products, 0 in the last 30 days, newest from 2011-09-24.
Products
- Phpgedview - 16 CVEs
Newest CVEs of Phpgedview
- CVE-2011-3778 - CVSS 5 (medium), 2011-09-24: PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error…
- CVE-2011-0405 - CVSS 6.8 (medium), 2011-01-11: Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to…
- CVE-2008-2064 - CVSS 10 (critical), 2008-05-02: Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface…
- CVE-2007-5051 - CVSS 4.3 (medium), 2007-09-24: Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) box_width,…
- CVE-2005-4469 - CVSS 7.5 (high), 2005-12-22: Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the…
- CVE-2005-4467 - CVSS 5 (medium), 2005-12-22: Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a ..…
- CVE-2004-0128 - CVSS 7.5 (high), 2004-03-03: PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP…
- CVE-2004-0127 - CVSS 7.5 (high), 2004-03-03: Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute…
- CVE-2004-0130 - CVSS 5 (medium), 2004-03-03: login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the…
- CVE-2004-0066 - CVSS 5 (medium), 2004-02-17: phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (2) famlist.php,…
- CVE-2004-0065 - CVSS 7.5 (high), 2004-02-17: Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php.
- CVE-2004-0067 - CVSS 4.3 (medium), 2004-02-17: Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1)…
- CVE-2004-0032 - CVSS 6.8 (medium), 2004-01-20: Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname…
- CVE-2004-0031 - CVSS 7.5 (high), 2004-01-20: PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.
- CVE-2004-0030 - CVSS 9.8 (critical), 2004-01-20: PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote…
- CVE-2004-0033 - CVSS 5 (medium), 2004-01-20: admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.
