CVE Feed

    Dashboard / CVE / CVE-2004-0067

    CVE-2004-0067

    Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php. NOTE: some aspects of vector 10 were later reported to affect 4.1.

    Published:Jan 15, 2004
    Last Modified:Apr 16, 2026
    EPS:Jan 15, 2004
    EPSS Score:0.0148
    CVSS Score:4.3

    Affected Products

    Vendor
    Phpgedview
    Product
    Phpgedview

    Exploits

    https://www.exploit-db.com/exploits/24834https://www.exploit-db.com/exploits/24810https://www.exploit-db.com/exploits/24814https://www.exploit-db.com/exploits/24816https://www.exploit-db.com/exploits/24819https://www.exploit-db.com/exploits/24820https://www.exploit-db.com/exploits/24821https://www.exploit-db.com/exploits/24822https://www.exploit-db.com/exploits/24829https://www.exploit-db.com/exploits/24830https://www.exploit-db.com/exploits/24831https://www.exploit-db.com/exploits/24832https://www.exploit-db.com/exploits/24835https://www.exploit-db.com/exploits/24837

    Related CVEs

    CVE-2011-3778 (CVSS 5) — PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, …
    CVE-2011-0405 (CVSS 6.8) — Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_qu…
    CVE-2008-2064 (CVSS 10) — Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related…
    CVE-2007-5051 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbit…
    CVE-2005-4468 (CVSS 7.5) — PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote atta…
    CVE-2005-4467 (CVSS 5) — Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attacker…
    CVE-2005-4469 (CVSS 7.5) — Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers t…
    CVE-2004-0128 (CVSS 7.5) — PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier a…
    CVE-2004-0127 (CVSS 7.5) — Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote att…
    CVE-2004-0130 (CVSS 5) — login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP r…

    References

    http://marc.info/?l=bugtraq&m=107394912715478&w=2
    http://secunia.com/advisories/26628
    http://securitytracker.com/id?1018613
    http://www.osvdb.org/3473
    http://www.osvdb.org/3474
    http://www.osvdb.org/3475
    http://www.osvdb.org/3476
    http://www.osvdb.org/3477
    http://www.osvdb.org/3478
    http://www.osvdb.org/3479
    http://www.securityfocus.com/archive/1/477881/100/0/threaded
    http://www.securityfocus.com/bid/11868
    http://www.securityfocus.com/bid/11880
    http://www.securityfocus.com/bid/11882
    http://www.securityfocus.com/bid/11888
    http://www.securityfocus.com/bid/11890
    http://www.securityfocus.com/bid/11891
    http://www.securityfocus.com/bid/11894
    http://www.securityfocus.com/bid/11903
    http://www.securityfocus.com/bid/11904
    http://www.securityfocus.com/bid/11905
    http://www.securityfocus.com/bid/11906
    http://www.securityfocus.com/bid/11907
    http://www.vupen.com/english/advisories/2007/2995
    https://exchange.xforce.ibmcloud.com/vulnerabilities/14212
    https://exchange.xforce.ibmcloud.com/vulnerabilities/36285
    http://marc.info/?l=bugtraq&m=107394912715478&w=2
    http://secunia.com/advisories/26628
    http://securitytracker.com/id?1018613
    http://www.osvdb.org/3473
    http://www.osvdb.org/3474
    http://www.osvdb.org/3475
    http://www.osvdb.org/3476
    http://www.osvdb.org/3477
    http://www.osvdb.org/3478
    http://www.osvdb.org/3479
    http://www.securityfocus.com/archive/1/477881/100/0/threaded
    http://www.securityfocus.com/bid/11868
    http://www.securityfocus.com/bid/11880
    http://www.securityfocus.com/bid/11882
    http://www.securityfocus.com/bid/11888
    http://www.securityfocus.com/bid/11890
    http://www.securityfocus.com/bid/11891
    http://www.securityfocus.com/bid/11894
    http://www.securityfocus.com/bid/11903
    http://www.securityfocus.com/bid/11904
    http://www.securityfocus.com/bid/11905
    http://www.securityfocus.com/bid/11906
    http://www.securityfocus.com/bid/11907
    http://www.vupen.com/english/advisories/2007/2995
    https://exchange.xforce.ibmcloud.com/vulnerabilities/14212
    https://exchange.xforce.ibmcloud.com/vulnerabilities/36285

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High