CVE-2004-2538: Nilesh Dosooye Phpcodegenie

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer.

Affected products

• Nilesh Dosooye Phpcodegenie: up to and including 3.0.1; version 1.1 only; version 1.4 only; version 1.21 only; version 3.0_alpha only; version 3.0_beta only

Published 2004-12-31. Last modified 2026-06-16.