Description
Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | phpgedview | 4.0.2.dfsg-4 | DSA-1580-1 |
Advisories 1
- DSA-1580-1 phpgedview - privilege escalation Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-1580 vendor-advisory
- 28978 vdb-entry
- http://sourceforge.net/project/shownotes.php?group_id=55456&release_id=595222
- 30256 third-party-advisory
- 29989 third-party-advisory
- http://www.phpgedview.net/
- phpgedview-unspecified-code-execution(42085) vdb-entry