CVE-2004-0067

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-02-17 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php. NOTE: some aspects of vector 10 were later reported to affect 4.1.

Affected products

Phpgedview: through 2.65

References

http://marc.info/?l=bugtraq&m=107394912715478&w=2
http://secunia.com/advisories/26628
http://securitytracker.com/id?1018613
http://www.osvdb.org/3473
http://www.osvdb.org/3474
http://www.osvdb.org/3475
http://www.osvdb.org/3476
http://www.osvdb.org/3477
http://www.osvdb.org/3478
http://www.osvdb.org/3479
http://www.securityfocus.com/archive/1/477881/100/0/threaded
http://www.securityfocus.com/bid/11868

Get alerted when CVE-2004-0067 or the next vulnerability affects your stack