QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0067

Back to search

CVE-2004-0067

Published: Jan 15, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php. NOTE: some aspects of vector 10 were later reported to affect 4.1.

VendorProductVersions

n/a

n/a

affected
n/a

References

11891
vdb-entry
x_refsource_BID
3473
vdb-entry
x_refsource_OSVDB
26628
third-party-advisory
x_refsource_SECUNIA
3478
vdb-entry
x_refsource_OSVDB
phpgedview-multiple-xss(14212)
vdb-entry
x_refsource_XF
11904
vdb-entry
x_refsource_BID
ADV-2007-2995
vdb-entry
x_refsource_VUPEN
phpgedview-login-xss(36285)
vdb-entry
x_refsource_XF
11903
vdb-entry
x_refsource_BID
1018613
vdb-entry
x_refsource_SECTRACK
11888
vdb-entry
x_refsource_BID
3476
vdb-entry
x_refsource_OSVDB
11905
vdb-entry
x_refsource_BID
3475
vdb-entry
x_refsource_OSVDB
3477
vdb-entry
x_refsource_OSVDB
11907
vdb-entry
x_refsource_BID
3479
vdb-entry
x_refsource_OSVDB
11882
vdb-entry
x_refsource_BID
11906
vdb-entry
x_refsource_BID
11880
vdb-entry
x_refsource_BID
3474
vdb-entry
x_refsource_OSVDB
11890
vdb-entry
x_refsource_BID
11894
vdb-entry
x_refsource_BID
20040112 More phpGedView Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
11868
vdb-entry
x_refsource_BID
20070827 PhpGedView login page multiple XSS
mailing-list
x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now