Unrated severityNVD Advisory· Published Mar 3, 2004· Updated Jun 16, 2026
CVE-2004-0128
CVE-2004-0128
Description
PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*
- cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*
- (no CPE)range: <=2.65.1
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/archive/1/352355nvdExploitPatchVendor Advisory
- www.securityfocus.com/bid/9531nvdExploitPatchVendor Advisory
- sourceforge.net/project/shownotes.phpnvdVendor Advisory
- secunia.com/advisories/10753/nvd
- www.osvdb.org/3769nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/14987nvd
News mentions
0No linked articles in our index yet.