Back to CVE Browser

CVE-2004-0031

HIGH

7.5

CVSS Severity Score

EPSS Score0.1280%

EPSS Percentile26.22th

PublishedJan 20, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.

Affected Platforms (CPE)

📦

Phpgedview

Phpgedview

= 2.61

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107340840209453&w=2

🔗 http://secunia.com/advisories/10565

🔗 http://www.osvdb.org/3403

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/14161

🔗 http://marc.info/?l=bugtraq&m=107340840209453&w=2

🔗 http://secunia.com/advisories/10565

🔗 http://www.osvdb.org/3403

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/14161

Related Vulnerabilities

CVE-2008-206410.0

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental d...

CVE-2004-00309.8

PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVI...

CVE-2004-01287.5

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attacke...

CVE-2004-00657.5

Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline....