CVEvulnerability
CVE-2005-1886
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-06-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameters when posting a new comment.
Affected configurations
• yapig yapig 0.92b
• yapig yapig 0.93u
• yapig yapig 0.94u
References
- http://secunia.com/advisories/15600/ Vendor Advisory
- http://securitytracker.com/id?1014103 Exploit, Vendor Advisory
- http://secwatch.org/advisories/secwatch/20050530_yapig.txt Exploit, Vendor Advisory
- http://www.osvdb.org/17118 www.osvdb.org
- http://www.securityfocus.com/bid/13875 Exploit
- http://www.securityfocus.com/bid/13876 Exploit
- http://secunia.com/advisories/15600/ Vendor Advisory
- http://securitytracker.com/id?1014103 Exploit, Vendor Advisory
- http://secwatch.org/advisories/secwatch/20050530_yapig.txt Exploit, Vendor Advisory
- http://www.osvdb.org/17118 www.osvdb.org
- http://www.securityfocus.com/bid/13875 Exploit
- http://www.securityfocus.com/bid/13876 Exploit