CVE-2005-1881

Опубликовано: 06 июн. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.

Ссылки

http://secunia.com/advisories/15600/
Broken Link
Vendor Advisory
http://securitytracker.com/id?1014103
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
http://secwatch.org/advisories/secwatch/20050530_yapig.txt
Broken Link
Vendor Advisory
http://www.osvdb.org/17115
Broken Link
Vendor Advisory
http://secunia.com/advisories/15600/
Broken Link
Vendor Advisory
http://securitytracker.com/id?1014103
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
http://secwatch.org/advisories/secwatch/20050530_yapig.txt
Broken Link
Vendor Advisory
http://www.osvdb.org/17115
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:yapig:yapig:0.92b:*:*:*:*:*:*:*

cpe:2.3:a:yapig:yapig:0.93u:*:*:*:*:*:*:*

cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06748

Низкий

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-87jr-fh5g-pq9x

github

почти 4 года назад