CVE-2005-1881

Exploit

EPSS 6.75%
Published 06.06.2005 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.

Affected products Warnungen 0 Metrics 2 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Yapig ≫ Yapig Version0.92b

Yapig ≫ Yapig Version0.93u

Yapig ≫ Yapig Version0.94u

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	6.75%	0.903

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://secunia.com/advisories/15600/

Vendor Advisory

Broken Link

http://securitytracker.com/id?1014103

Third Party Advisory

Vendor Advisory

Exploit

Broken Link

VDB Entry

http://secwatch.org/advisories/secwatch/20050530_yapig.txt

Vendor Advisory

Broken Link

http://www.osvdb.org/17115

Vendor Advisory

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2005-1881

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-1881

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-1881

EUVD