NVD

Id
70535  
Name
CVE-2004-0067  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php. NOTE: some aspects of vector 10 were later reported to affect 4.1.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-02-17  
Modified Date
2017-07-10  
Seq
2004-0067  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363474 70535 CVE-2004-0067 20040112 More phpGedView Vulnerabilities  View
363475 70535 CVE-2004-0067 1018613  View
363476 70535 CVE-2004-0067 20070827 PhpGedView login page multiple XSS  View
363477 70535 CVE-2004-0067 11868  View
363478 70535 CVE-2004-0067 11880  View
363479 70535 CVE-2004-0067 11882  View
363480 70535 CVE-2004-0067 11888  View
363481 70535 CVE-2004-0067 11890  View
363482 70535 CVE-2004-0067 11891  View
363483 70535 CVE-2004-0067 11894  View
363484 70535 CVE-2004-0067 11903  View
363485 70535 CVE-2004-0067 11904  View
363486 70535 CVE-2004-0067 11905  View
363487 70535 CVE-2004-0067 11906  View
363488 70535 CVE-2004-0067 11907  View
363489 70535 CVE-2004-0067 ADV-2007-2995  View
363490 70535 CVE-2004-0067 phpgedview-multiple-xss(14212)  View
363491 70535 CVE-2004-0067 phpgedview-login-xss(36285)  View

Related JVN