Unrated severityNVD Advisory· Published Mar 3, 2004· Updated Apr 16, 2026
CVE-2004-0128
CVE-2004-0128
Description
PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.
Affected products
6cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.securityfocus.com/archive/1/352355nvdExploitPatchVendor Advisory
- www.securityfocus.com/bid/9531nvdExploitPatchVendor Advisory
- sourceforge.net/project/shownotes.phpnvdVendor Advisory
- secunia.com/advisories/10753/nvd
- www.osvdb.org/3769nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/14987nvd
News mentions
0No linked articles in our index yet.