CVE

Id
8555  
CVE No.
CVE-2004-0127  
Status
Candidate  
Description
Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.  
Phase
Modified (20071113)  
Votes
ACCEPT(2) Baker, Green | NOOP(4) Armstrong, Cole, Cox, Wall  
Comments
Green> Vendor ack"ed and provides an update; | http://prdownloads.sourceforge.net/phpgedview/phpGedView-2.65.2.zip?download  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
53042 8555 CVE-2004-0127 BUGTRAQ:20040129 PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior  View
53043 8555 CVE-2004-0127 URL:http://www.securityfocus.com/archive/1/352355  View
53044 8555 CVE-2004-0127 BID:9529  View
53045 8555 CVE-2004-0127 URL:http://www.securityfocus.com/bid/9529  View
53046 8555 CVE-2004-0127 OSVDB:3768  View
53047 8555 CVE-2004-0127 URL:http://www.osvdb.org/displayvuln.php?osvdb_id=3768  View
53048 8555 CVE-2004-0127 SECTRACK:1008892  View
53049 8555 CVE-2004-0127 URL:http://www.securitytracker.com/id?1008892  View
53050 8555 CVE-2004-0127 SECUNIA:10753  View
53051 8555 CVE-2004-0127 URL:http://secunia.com/advisories/10753/  View
53052 8555 CVE-2004-0127 XF:phpgedview-editconfig-directory-traversal(15129)  View

Related JVN