Approved changes feed: RSS · Atom

cpe:2.3:a:phpgedview:phpgedview:4.1.1:*:*:*:*:*:*:*

part: a version: 4.1.1 update: *

VendorPhpgedview (0599a260-d0e1-561f-a33e-4f54835a4613)
ProductPhpgedview (2849e79d-fe28-58e0-9ab7-1c0afa10be20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bitweaver/phpgedview purl2cpe 2026-06-01 10:11:46.768402
pkg:sourceforge/phpgedview purl2cpe 2026-06-01 10:11:46.768404

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2064 vulnerable 2026-06-08 04:50:22.820795 Details available
Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems."
Published: 2008-05-02T23:00:00.000Z
Updated: 2024-08-07T08:49:57.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5051 vulnerable 2026-06-08 04:49:57.753205 Details available
Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) box_width, (2) PEDIGREE_GENERATIONS, and (3) rootid parameters in ancestry.php, and the (4) newpid parameter in timeline.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2007-09-24T00:00:00.000Z
Updated: 2024-08-07T15:17:27.909Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.