Total vulnerabilities in the database
PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by serviceClientTest.php and certain other files.
Software | From | Fixed in |
---|---|---|
phpgedview / phpgedview | 4.2.3 | 4.2.3.x |