VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2004· Updated Jun 16, 2026

CVE-2004-0130

CVE-2004-0130

Description

login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.

Affected products

2
  • Phpgedview/Phpgedview2 versions
    cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*range: <=2.65
    • (no CPE)range: <=2.65

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.