CVE-2004-0130

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-03-03 · updated 2026-06-16

Description

login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.

Affected products

Phpgedview: through 2.65

References

http://securitytracker.com/alerts/2004/Jan/1008844.html
http://www.netvigilance.com/advisory0001
http://www.osvdb.org/6886
http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/15128
http://securitytracker.com/alerts/2004/Jan/1008844.html
http://www.netvigilance.com/advisory0001
http://www.osvdb.org/6886
http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/15128

Get alerted when CVE-2004-0130 or the next vulnerability affects your stack