Back to CVE Browser

CVE-2004-0065

HIGH

7.5

CVSS Severity Score

EPSS Score0.0740%

EPSS Percentile4.54th

PublishedFeb 17, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php.

Affected Platforms (CPE)

📦

Phpgedview

Phpgedview

<= 2.65

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107394912715478&w=2

🔗 http://www.securityfocus.com/bid/11910

🔗 http://www.securityfocus.com/bid/11925

🔗 http://marc.info/?l=bugtraq&m=107394912715478&w=2

🔗 http://www.securityfocus.com/bid/11910

🔗 http://www.securityfocus.com/bid/11925

Related Vulnerabilities

CVE-2008-206410.0

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental d...

CVE-2004-00309.8

PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVI...

CVE-2004-00317.5

PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request ...

CVE-2004-01287.5

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attacke...