CVE:CVE-2005-4469
CNNVD:CNNVD-200512-510
PHPGedView 3.3.7及更早版本存在多个直接静态代码注入漏洞，远程攻击者可以通过(1)login.php中的username字段或login_register.php中的(2)user_language，(3)user_email和(4)user_gedcomid参数，这些参数直接插入在authenticate.php中，来执行任意PHP代码。
solution:Upgrade phpgedview phpgedview to a higher version than 3.3.7,2.52.3,2.60,2.61,2.61.1,2.65,2.65.1,2.65.2,2.65_beta5,and avoid the version (,3.3.7],2.52.3,2.60,2.61,2.61.1,2.65,2.65.1,2.65.2,2.65_beta5
solution:Upgrade iatek intranetapp to a higher version than 3.3,and avoid the version (,3.3]