Critical severity9.8NVD Advisory· Published Jan 20, 2004· Updated Jun 16, 2026
CVE-2004-0030
CVE-2004-0030
Description
PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*
- (no CPE)range: =2.61
Patches
Vulnerability mechanics
References
6- marc.infonvdMailing ListPatch
- secunia.com/advisories/10565nvdBroken LinkVendor Advisory
- www.securityfocus.com/bid/9368nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/14159nvdThird Party AdvisoryVDB Entry
- www.osvdb.org/3343nvdBroken Link
News mentions
0No linked articles in our index yet.