Description
Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.
References
- 3768 vdb-entry
- 9529 vdb-entry
- 1008892 vdb-entry
- 20040129 PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior mailing-list
- 10753 third-party-advisory
- phpgedview-editconfig-directory-traversal(15129) vdb-entry