CVE-2008-2064 Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface (API) to connect phpGedView with external....
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpgedview | <= 4.1.4 | No fix listed |
| phpgedview | = 0.6 | No fix listed |
| phpgedview | = 0.8 | No fix listed |
| phpgedview | = 0.95 | No fix listed |
| phpgedview | = 1.0 | No fix listed |
| phpgedview | = 1.1 | No fix listed |
| phpgedview | = 1.04 | No fix listed |
| phpgedview | = 2.0 | No fix listed |
| phpgedview | = 2.12 | No fix listed |
| phpgedview | = 2.13 | No fix listed |
| phpgedview | = 2.50 | No fix listed |
| phpgedview | = 2.60 | No fix listed |
| phpgedview | = 2.65 | No fix listed |
| phpgedview | = 3.0 | No fix listed |
| phpgedview | = 3.2 | No fix listed |
| phpgedview | = 3.3.8 | No fix listed |
| phpgedview | = 4.0 | No fix listed |
| phpgedview | = 4.1.1 | No fix listed |
| phpgedview | = 4.1.3 | No fix listed |
References
- 29989 third-party-advisory vendor-advisory
- 30256 third-party-advisory vendor-advisory
- sourceforge.net patch
- DSA-1580 patch vendor-advisory
- www.phpgedview.net patch vendor-advisory
- 28978 vdb-entry
- phpgedview-unspecified-code-execution(42085) vdb-entry