CVE-2005-4467: Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attac...

Security readout for executives and security teams

CVE-2005-4467 affects PHPGedView 3.3.7 and earlier. A remote user could manipulate a directory parameter in help_text_vars.php to read or include files outside the intended application path. For a legacy public-facing genealogy site, this could expose sensitive server files and may support code execution according to cited advisory titles. Exposure is likely limited to legacy PHPGedView deployments running version 3.3.7 or earlier with help_text_vars.php reachable from the internet or untrusted users. The source bundle does not provide prevalence data, CPEs, hosting patterns, or current affected-version inventory. Treat this as high priority only where PHPGedView 3.3.7 or earlier is still deployed. The software is old, but internet exposure could create sensitive file disclosure and possible execution risk. If no deployment exists, record the CVE as not applicable. Mitigation focus: Inventory public and internal PHPGedView installations and confirm versions.; Upgrade or remove PHPGedView if vendor guidance identifies a fixed release.; Verify help_text_vars.php includes the SourceForge fix before relying on source patching..

Prepared

Jun 29, 2026, 15:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.