CVE-2005-4467: Phpgedview

Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.

Affected products

• Phpgedview Phpgedview: version 2.52.3 only; version 2.60 only; version 2.61 only; version 2.61.1 only; version 2.65 only; version 2.65.1 only; …

Published 2005-12-22. Last modified 2026-06-16.