EUVD-2005-4462

Malware in sbrugna...

CVE-2005-4467: Undefined Security Weakness

Directory traversal vulnerability in helptextvars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. dot dot in the PGVBASEDIRECTORY parameter...

CVE-2005-4468: Undefined Security Weakness

PHP remote file include vulnerability in helptextvars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGVBASEDIRECTORY parameter...

CVE-2005-4467

CVE-2005-4467 affects PhpGedView up to version 3.3.7, with a directory traversal/remote file inclusion in help_text_vars.php via the PGV_BASE_DIRECTORY parameter. The underlying issue is insufficient input sanitization, allowing an attacker to read arbitrary files and, under certain conditions (e...