CVEvulnerability
CVE-2004-0067
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-02-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php. NOTE: some aspects of vector 10 were later reported to affect 4.1.
Affected configurations
• phpgedview phpgedview (<= 2.65)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=107394912715478&w=2 marc.info
- http://secunia.com/advisories/26628 Vendor Advisory
- http://securitytracker.com/id?1018613 securitytracker.com
- http://www.osvdb.org/3473 www.osvdb.org
- http://www.osvdb.org/3474 www.osvdb.org
- http://www.osvdb.org/3475 www.osvdb.org
- http://www.osvdb.org/3476 www.osvdb.org
- http://www.osvdb.org/3477 www.osvdb.org
- http://www.osvdb.org/3478 www.osvdb.org
- http://www.osvdb.org/3479 www.osvdb.org
- http://www.securityfocus.com/archive/1/477881/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/11868 www.securityfocus.com
- http://www.securityfocus.com/bid/11880 www.securityfocus.com
- http://www.securityfocus.com/bid/11882 www.securityfocus.com
- http://www.securityfocus.com/bid/11888 www.securityfocus.com
- http://www.securityfocus.com/bid/11890 www.securityfocus.com
- http://www.securityfocus.com/bid/11891 www.securityfocus.com
- http://www.securityfocus.com/bid/11894 www.securityfocus.com
- http://www.securityfocus.com/bid/11903 www.securityfocus.com
- http://www.securityfocus.com/bid/11904 www.securityfocus.com
- http://www.securityfocus.com/bid/11905 www.securityfocus.com
- http://www.securityfocus.com/bid/11906 www.securityfocus.com
- http://www.securityfocus.com/bid/11907 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2995 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14212 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36285 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=107394912715478&w=2 marc.info
- http://secunia.com/advisories/26628 Vendor Advisory
- http://securitytracker.com/id?1018613 securitytracker.com
- http://www.osvdb.org/3473 www.osvdb.org
- http://www.osvdb.org/3474 www.osvdb.org
- http://www.osvdb.org/3475 www.osvdb.org
- http://www.osvdb.org/3476 www.osvdb.org
- http://www.osvdb.org/3477 www.osvdb.org
- http://www.osvdb.org/3478 www.osvdb.org
- http://www.osvdb.org/3479 www.osvdb.org
- http://www.securityfocus.com/archive/1/477881/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/11868 www.securityfocus.com
- http://www.securityfocus.com/bid/11880 www.securityfocus.com
- http://www.securityfocus.com/bid/11882 www.securityfocus.com
- http://www.securityfocus.com/bid/11888 www.securityfocus.com
- http://www.securityfocus.com/bid/11890 www.securityfocus.com
- http://www.securityfocus.com/bid/11891 www.securityfocus.com
- http://www.securityfocus.com/bid/11894 www.securityfocus.com
- http://www.securityfocus.com/bid/11903 www.securityfocus.com
- http://www.securityfocus.com/bid/11904 www.securityfocus.com
- http://www.securityfocus.com/bid/11905 www.securityfocus.com
- http://www.securityfocus.com/bid/11906 www.securityfocus.com
- http://www.securityfocus.com/bid/11907 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2995 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14212 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36285 exchange.xforce.ibmcloud.com