CVE-2005-4469

Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_register.php, which is directly inserted into authenticate.php.

• http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36Patch
• http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37Patch
• http://rgod.altervista.org/phpgedview_337_xpl.htmlExploit
• http://secunia.com/advisories/18177Patch, Vendor Advisory
• http://securitytracker.com/id?1015395
• http://www.osvdb.org/22010
• http://www.securityfocus.com/archive/1/419906/100/0/threaded
• http://www.securityfocus.com/bid/15983Patch
• http://www.vupen.com/english/advisories/2005/3033
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23873
• https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081
• http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36Patch
• http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37Patch
• http://rgod.altervista.org/phpgedview_337_xpl.htmlExploit
• http://secunia.com/advisories/18177Patch, Vendor Advisory
• http://securitytracker.com/id?1015395
• http://www.osvdb.org/22010
• http://www.securityfocus.com/archive/1/419906/100/0/threaded
• http://www.securityfocus.com/bid/15983Patch
• http://www.vupen.com/english/advisories/2005/3033
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23873
• https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081

Published

Dec 22, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4463WordPress before 1.5.2 allows remote attackers to obtain sen…
• CVE-2005-4464Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allo…
• CVE-2005-4465The Internet Key Exchange version 1 (IKEv1) implementation i…
• CVE-2005-4466Heap-based buffer overflow in the SIPParser function in i3si…
• CVE-2005-4467Directory traversal vulnerability in help_text_vars.php in P…
• CVE-2005-4468PHP remote file include vulnerability in help_text_vars.php …
• CVE-2005-4470Heap-based buffer overflow in the get_bhead function in read…
• CVE-2005-4471POP3 service in Avaya Modular Messaging Message Storage Serv…
• CVE-2005-4472Stack-based buffer overflow in the Macromedia JRun 4 web ser…
• CVE-2005-4473Unspecified vulnerability in Macromedia JRun 4 web server (J…
• CVE-2005-4474Buffer overflow in the "Add to archive" command in WinRAR 3.…
• CVE-2005-4475Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 an…