CVE-2004-0030
CRITICALPHPGEDVIEW 2.61 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code.
Exploits (1)
References (6)
Scores
CVSS v3
9.8
EPSS
0.0538
EPSS Percentile
90.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-829
Status
published
Products (1)
phpgedview/phpgedview
2.61
Published
Jan 20, 2004
Tracked Since
Feb 18, 2026