PhpGedView 2.61 - Multiple PHP Remote File Include Vulnerabilities

ID EDB-ID:23520
Type exploitdb
Reporter Windak
Modified 2004-01-06T00:00:00


PhpGedView 2.61 Multiple PHP Remote File Include Vulnerabilities. CVE-2004-0030. Webapps exploit for php platform


PhpGedView is prone to multiple file include vulnerabilities. The source of the issue is that a number of scripts that ship with the software permit remote users to influence require() paths for various external files. This will permit remote attackers to cause malicious PHP scripts from attacker-controlled servers to be included and subsequently executed in the context of the web server hosting the vulnerable software.

These issues are reported to affect PhpGedView 2.61. Other versions are also likely affected.[attacker's_site][attacker's_site][attacker's_site]