← Database

CVE-2004-0128

HIGH CVSS: 7.5 Published: 2004-03-03 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.

Affected Platforms

Phpgedview Phpgedview

Weakness Type

NVD-CWE-Other

References