CVE-2011-0405

CVE-2011-0405 describes a directory traversal vulnerability in PhpGedView 4.2.3, and potentially other versions, specifically within the module.php component when the magic_quotes_gpc setting is disabled. This flaw allows unauthenticated remote attackers to read arbitrary files on the server by manipulating the pgvaction parameter with directory traversal sequences. With a CVSS score of 6.8, this vulnerability is of medium severity, indicating that an attacker can exploit it over the network with moderate complexity to achieve partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an ExploitDB entry (EDB-15913) confirms the existence of a local file inclusion exploit for PhpGedView 4.2.3. Despite its FAUCET Risk Score of 91/100, community discussion and media coverage for this CVE are minimal.