rgod has reported some vulnerabilities in PhpGedView, which can be exploited by malicious people to disclose sensitive information and compromise a vulnerable system.

1) Input passed to the "PGV_BASE_DIRECTORY" parameter in "help_text_vars.php" isn't properly verified, before it is used to include files. This can be exploited to include arbitrary files from external and local resources.

Successful exploitation requires that "register_globals" is enabled.

2) Input passed to the "user_language", "user_email", and "user_gedcomid" parameters when registering isn't properly sanitised before being stored in the PHP script "authenticate.php". This can be exploited to inject and execute arbitrary PHP code.

Successful exploitation requires that "magic_quotes_gpc" is disabled.

The vulnerabilities have been reported in version 3.3.7 and prior.

Solution
Update to version 3.3.8.
Further details available to Secunia VIM customers

Provided and/or discovered by
rgod

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://rgod.altervista.org/phpgedview_337_xpl.html

Deep Links
Links available to Secunia VIM customers