PT-2007-6065 · Yapig · Yapig

Published 2007-09-18 · Updated 2024-08-07 · CVE-2007-4951

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions YaPiG version 0.95b

Description A remote file inclusion issue in sample.php allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG PATH parameter.

Recommendations For YaPiG version 0.95b, consider restricting the use of the YAPIG PATH parameter to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-4951

Affected Products

Yapig

References · 3

• 🔥 http://arfis.wordpress.com/2007/09/14/rfi-03-yapig-yet-another-php-image-gallery · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4951 · Security Note
• http://osvdb.org/42519 · Note