CVEvulnerability
CVE-2005-1881
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-434
Description
upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.
Affected configurations
• yapig yapig 0.92b
• yapig yapig 0.93u
• yapig yapig 0.94u
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
Referenced by CWE · observed example (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- http://secunia.com/advisories/15600/ Broken Link, Vendor Advisory
- http://securitytracker.com/id?1014103 Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
- http://secwatch.org/advisories/secwatch/20050530_yapig.txt Broken Link, Vendor Advisory
- http://www.osvdb.org/17115 Broken Link, Vendor Advisory
- http://secunia.com/advisories/15600/ Broken Link, Vendor Advisory
- http://securitytracker.com/id?1014103 Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
- http://secwatch.org/advisories/secwatch/20050530_yapig.txt Broken Link, Vendor Advisory
- http://www.osvdb.org/17115 Broken Link, Vendor Advisory