CVE-2005-2319

Опубликовано: 19 июл. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.

Ссылки

http://phpyawp.com/yawiki/index.php?page=ChangeLog
http://secunia.com/advisories/16049
http://www.hardened-php.net/advisory-102005.php
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/404948
Patch
Vendor Advisory
http://www.securityfocus.com/bid/14237
Patch
http://phpyawp.com/yawiki/index.php?page=ChangeLog
http://secunia.com/advisories/16049
http://www.hardened-php.net/advisory-102005.php
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/404948
Patch
Vendor Advisory
http://www.securityfocus.com/bid/14237
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:yawp:yawp:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:yawp:yawp:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:yawp:yawp:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:yawp:yawp:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:yawp:yawp:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:yawp:yawp:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:yawp:yawp:1.0.6:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00524

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-pr8q-f7jx-h4v7

github

почти 4 года назад