Approved changes feed: RSS · Atom

cpe:2.3:a:phpgedview:phpgedview:2.65_beta5:*:*:*:*:*:*:*

part: a version: 2.65_beta5 update: *

VendorPhpgedview (0599a260-d0e1-561f-a33e-4f54835a4613)
ProductPhpgedview (2849e79d-fe28-58e0-9ab7-1c0afa10be20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bitweaver/phpgedview purl2cpe 2026-06-01 10:11:46.761327
pkg:sourceforge/phpgedview purl2cpe 2026-06-01 10:11:46.761329

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4469 vulnerable 2026-06-08 04:48:43.950062 Details available
Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_register.php, which is directly inserted into authenticate.php.
Published: 2005-12-22T00:00:00.000Z
Updated: 2024-08-07T23:46:05.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4468 not_vulnerable 2026-06-08 04:48:43.949448 Details available
PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGV_BASE_DIRECTORY parameter.
Published: 2005-12-22T00:00:00.000Z
Updated: 2024-08-07T23:46:05.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4467 vulnerable 2026-06-08 04:48:43.944855 Details available
Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.
Published: 2005-12-22T00:00:00.000Z
Updated: 2024-08-07T23:46:05.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.