| Package | Affected versions | Patched versions |
|---|---|---|
| phpgedview | = 2.52.3= 2.60= 2.61= 2.61.1= 2.65= 2.65.1 |
Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free