CVEブラウザに戻る

CVE-2004-0065

HIGH

7.5

CVSS Severity Score

EPSS Score0.0740%

EPSS Percentile4.54th

Published2004年2月17日

Last Modified2026年4月16日

Vulnerability Description

Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php.

Affected Platforms (CPE)

📦

Phpgedview

Phpgedview

<= 2.65

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107394912715478&w=2

🔗 http://www.securityfocus.com/bid/11910

🔗 http://www.securityfocus.com/bid/11925

🔗 http://marc.info/?l=bugtraq&m=107394912715478&w=2

🔗 http://www.securityfocus.com/bid/11910

🔗 http://www.securityfocus.com/bid/11925

関連する脆弱性情報

CVE-2008-206410.0

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental d...

CVE-2004-00309.8

PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVI...

CVE-2004-00317.5

PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request ...

CVE-2004-01287.5

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attacke...