CVE-2005-4469: Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attacker...

Security readout for executives and security teams

CVE-2005-4469 is a legacy PHPGedView issue where remote input to login and registration fields could be written into a PHP authentication file. On affected public sites, this could let an attacker run PHP code on the server. The source bundle does not provide CVSS, KEV listing, or current exploitation evidence. Exposure is most likely on internet-facing PHPGedView 3.3.7 or earlier installations with reachable login or registration workflows. Modern environments are only exposed if they still host this obsolete genealogy application or preserved legacy code. Prioritize remediation if any affected PHPGedView instance is internet-facing. The business risk is server compromise through an obsolete web application, but urgency depends on whether the product is still deployed. Mitigation focus: Identify and retire any PHPGedView 3.3.7 or earlier installations.; Apply vendor-confirmed SourceForge fixes or upgrade to a maintained patched release.; Restrict public access to legacy PHPGedView until remediation is verified..

Prepared

Jun 29, 2026, 15:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.