CVE Feed

    Dashboard / CVE / CVE-2005-4469

    CVE-2005-4469

    Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_register.php, which is directly inserted into authenticate.php.

    Published:Dec 22, 2005
    Last Modified:Apr 16, 2026
    EPS:Dec 22, 2005
    EPSS Score:0.02522
    CVSS Score:7.5

    Affected Products

    Vendor
    Phpgedview
    Product
    Phpgedview

    Exploits

    http://rgod.altervista.org/phpgedview_337_xpl.htmlhttp://rgod.altervista.org/phpgedview_337_xpl.html

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2011-3778 (CVSS 5) — PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, …
    CVE-2011-0405 (CVSS 6.8) — Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_qu…
    CVE-2008-2064 (CVSS 10) — Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related…
    CVE-2007-5051 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbit…
    CVE-2005-4468 (CVSS 7.5) — PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote atta…
    CVE-2005-4467 (CVSS 5) — Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attacker…
    CVE-2004-0128 (CVSS 7.5) — PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier a…
    CVE-2004-0127 (CVSS 7.5) — Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote att…
    CVE-2004-0130 (CVSS 5) — login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP r…
    CVE-2004-0031 (CVSS 7.5) — PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a …

    References

    http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36
    http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37
    http://rgod.altervista.org/phpgedview_337_xpl.html
    http://secunia.com/advisories/18177
    http://securitytracker.com/id?1015395
    http://www.osvdb.org/22010
    http://www.securityfocus.com/archive/1/419906/100/0/threaded
    http://www.securityfocus.com/bid/15983
    http://www.vupen.com/english/advisories/2005/3033
    https://exchange.xforce.ibmcloud.com/vulnerabilities/23873
    https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081
    http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36
    http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37
    http://rgod.altervista.org/phpgedview_337_xpl.html
    http://secunia.com/advisories/18177
    http://securitytracker.com/id?1015395
    http://www.osvdb.org/22010
    http://www.securityfocus.com/archive/1/419906/100/0/threaded
    http://www.securityfocus.com/bid/15983
    http://www.vupen.com/english/advisories/2005/3033
    https://exchange.xforce.ibmcloud.com/vulnerabilities/23873
    https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High