CVE-2004-0067: Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inj...

Security readout for executives and security teams

This CVE describes multiple cross-site scripting flaws in phpGedView. A remote attacker could cause a vulnerable genealogy site to run attacker-supplied HTML or script in a visitor's browser. Business impact depends on whether phpGedView is still deployed and exposed, especially where users authenticate. Exposure is likely limited to organizations still running old phpGedView instances, particularly internet-facing sites. The source bundle does not provide CPEs, package names, or a complete affected-version matrix beyond before 2.65 and the later login.php note for 4.1. Prioritize if phpGedView is internet-facing or handles authenticated family-history records. The issue is old, but exposed legacy web software with XSS can still create account, privacy, and reputational risk. Mitigation focus: Inventory any phpGedView deployments and confirm exact application version.; Upgrade phpGedView instances older than 2.65 to a non-vulnerable release.; Review vendor or archived project guidance for the 4.1 login.php note..

Prepared

Jun 30, 2026, 07:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.