| Package | Affected versions | Patched versions |
|---|---|---|
| phpgedview | = 2.52.3= 2.60= 2.61= 2.61.1= 2.65= 2.65.1 |
PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free