CVE-2004-2538

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer.

Affected products

Nilesh Dosooye Phpcodegenie: through 3.0.1; 1.1, 1.4, 1.21, 3.0_alpha, 3.0_beta

References

http://phpcodegenie.sourceforge.net/phpCodeGenie/docs/ChangeLog.txt
http://secunia.com/advisories/12853
http://securitytracker.com/id?1011911
http://www.osvdb.org/11102
http://www.securityfocus.com/bid/11524
https://exchange.xforce.ibmcloud.com/vulnerabilities/17848
http://phpcodegenie.sourceforge.net/phpCodeGenie/docs/ChangeLog.txt
http://secunia.com/advisories/12853
http://securitytracker.com/id?1011911
http://www.osvdb.org/11102
http://www.securityfocus.com/bid/11524
https://exchange.xforce.ibmcloud.com/vulnerabilities/17848

Get alerted when CVE-2004-2538 or the next vulnerability affects your stack