Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitra…

published 2005-12-22 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-4462

cvss: 5.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 4.7%; EPSS 4.7% chance of exploitation in 30 days, percentile 91%
public exploits: 1; Exploit-DB

Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.

Patch / fix

links 2

Timeline

2005-12-20 First public exploit (EDB-1379)
2005-12-22 Published

Exploit prediction

4.74% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-1379 PHPGedView 3.3.7 - Remote Code Execution webapps, 2005-12-20
securityfocus.com http://www.securityfocus.com/bid/15983 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N

References

secunia.com /advisories/18177
third-party-advisory, patch, vendor-advisory
sourceforge.net /tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081
patch
securityfocus.com /bid/15983
vdb-entry, exploit
rgod.altervista.org /phpgedview_337_xpl.html
securityfocus.com /archive/1/419906/100/0/threaded
mailing-list
exchange.xforce.ibmcloud.com /vulnerabilities/23871
vdb-entry
cvs.sourceforge.net /viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64
vupen.com /english/advisories/2005/3033
vdb-entry
osvdb.org /22009
vdb-entry
securitytracker.com /id?1015395
vdb-entry

Sources

CVE List CVE-2005-4467
NVD CVE-2005-4467

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary