EUVD-2004-0065

Malware in sbrugna...

CVE-2004-0065

Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via 1 timeline.php and 2 placelist.php...

CVE-2004-0065

The CVE-2004-0065 entry refers to multiple SQL injection vulnerabilities in phpGedView prior to 2.65, allowing remote attackers to execute arbitrary SQL via timeline.php and placelist.php. Affected software: phpGedView (versions before 2.65). Root cause: SQL injection in two scripts (timeline.php...

CVE-2004-0065: Undefined Security Weakness

Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via 1 timeline.php and 2 placelist.php...

CVE-2004-0066: Undefined Security Weakness

phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to 1 indilist.php, 2 famlist.php, 3 placelist.php, 4 imageview.php, 5 timeline.php, 6 clippings.php, 7 login.php, and 8 gdbi.php...