← Database

CVE-2004-0066

MEDIUM CVSS: 5.0 Published: 2004-02-17 Modified: 2026-06-16

Description

phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (2) famlist.php, (3) placelist.php, (4) imageview.php, (5) timeline.php, (6) clippings.php, (7) login.php, and (8) gdbi.php.

Affected Platforms

Phpgedview Phpgedview

Weakness Type

NVD-CWE-Other

References