5.1

CVE-2005-4799

Exploit

EPSS 2.66%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comment" and (2) the img_size field in view.php.  NOTE: due to lack of details from the researcher, it is not clear whether the comment vector overlaps CVE-2005-1886.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Yapig ≫ Yapig Version <= 0.95b

Yapig ≫ Yapig Version0.92b

Yapig ≫ Yapig Version0.93u

Yapig ≫ Yapig Version0.94u

Yapig ≫ Yapig Version0.95

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.66%	0.853

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html

Vendor Advisory

Exploit

http://secunia.com/advisories/17041

Vendor Advisory

Exploit

http://www.osvdb.org/19958

http://www.osvdb.org/19959

http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt

Vendor Advisory

Exploit

http://www.securityfocus.com/bid/15092

Exploit

http://www.securityfocus.com/bid/15095

https://exchange.xforce.ibmcloud.com/vulnerabilities/22750

https://exchange.xforce.ibmcloud.com/vulnerabilities/22752

https://nvd.nist.gov/vuln/detail/CVE-2005-4799

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4799

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4799

EUVD