Back
CVE-2004-0127
Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.
Published: Mar 3, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (6)
| Vendor | Product | Version |
|---|---|---|
| phpgedview | phpgedview | 2.52.3 |
| phpgedview | phpgedview | 2.60 |
| phpgedview | phpgedview | 2.61 |
| phpgedview | phpgedview | 2.61.1 |
| phpgedview | phpgedview | 2.65 |
| phpgedview | phpgedview | 2.65.1 |
GitHub Security Advisory GHSA-xp6r-5ghh-6w2m
Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier...
References (12)
- http://secunia.com/advisories/10753/
- http://www.osvdb.org/displayvuln.php?osvdb_id=3768
- http://www.securityfocus.com/archive/1/352355 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9529 Exploit, Patch, Vendor Advisory
- http://www.securitytracker.com/id?1008892
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15129
- http://secunia.com/advisories/10753/
- http://www.osvdb.org/displayvuln.php?osvdb_id=3768
- http://www.securityfocus.com/archive/1/352355 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9529 Exploit, Patch, Vendor Advisory
- http://www.securitytracker.com/id?1008892
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15129
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
2.19%
Top 19% most likely to be exploited
Threat Score
30.7 / 100
Data Sources
NVD
EPSS
GitHub