Yapig

Yapig

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2007-4951

Exploit
  • EPSS 0.66%
  • Published 18.09.2007 20:17:00
  • Last modified 09.04.2025 00:30:58

PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter. NOTE: this issue has been disputed by CVE, since YAPIG_PATH is defined before use

4.3

CVE-2006-4421

  • EPSS 2.85%
  • Published 29.08.2006 00:04:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote attackers to inject arbitrary web script or HTML via the D_REFRESH_URL parameter.

5.1

CVE-2005-4799

Exploit
  • EPSS 2.66%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comme...

9

CVE-2005-4800

Exploit
  • EPSS 1.93%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, wh...

7.5

CVE-2005-4801

Exploit
  • EPSS 1.33%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access ...

4.3

CVE-2005-2736

  • EPSS 0.53%
  • Published 30.08.2005 11:45:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

7.5

CVE-2005-1882

Exploit
  • EPSS 2.26%
  • Published 09.06.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter.

5

CVE-2005-1883

Exploit
  • EPSS 0.52%
  • Published 09.06.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.

6.4

CVE-2005-1884

Exploit
  • EPSS 4%
  • Published 09.06.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.

4.3

CVE-2005-1886

Exploit
  • EPSS 1.65%
  • Published 09.06.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameters when posting a new comment.