CVE-2004-0030

Critical

Published: 20/01/2004(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

A PHP remote file inclusion vulnerability in PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server containing the code.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute code, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update PHPGEDVIEW to the latest version and secure the application against modifications of parameters that may lead to remote file inclusion.

Original NVD description (English source)

PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code.