CVE-2005-4800
- State
- Published
- Severity
- Not scored
- Published
- May 15, 2006
- Updated
- Aug 8, 2024
- Reserved
- May 15, 2006
Description
Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php. NOTE: this issue is easier to exploit due to a separate CSRF vulnerability.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- yapig-http-post-privilege-escalation(22753)vdb-entry
- 19960vdb-entry
- 20051013 Yapig: XSS / Code Injection Vulnerabilitymailing-list
- http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt
- 17041third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.