yapig kayıtları
yapig üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2005-4800İstismar yok | Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrayapig · yapig | Kritik9,0 | — | %2,1 | 31 Ara 2005 |
31İzleyin | CVE-2005-1881Kavram kanıtı | upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attacyapig · yapig · CWE-434 | Yüksek7,5 | — | %3,4 | 6 Haz 2005 |
31İzleyin | CVE-2005-1882Kavram kanıtı | PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code vyapig · yapig | Yüksek7,5 | — | %2,6 | 9 Haz 2005 |
31İzleyin | CVE-2005-4801İstismar yok | Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackersyapig · yapig | Yüksek7,5 | — | %1,6 | 31 Ara 2005 |
27İzleyin | CVE-2007-4951İstismar yok | PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the yapig · yapig · CWE-94 | Orta6,8 | — | %1,2 | 18 Eyl 2007 |
26İzleyin | CVE-2005-1884Kavram kanıtı | Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackeyapig · yapig | Orta6,4 | — | %2,5 | 9 Haz 2005 |
22İzleyin | CVE-2005-4799Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to injyapig · yapig | Orta5,1 | — | %6,9 | 31 Ara 2005 |
20İzleyin | CVE-2005-1885İstismar yok | view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integeryapig · yapig | Orta5,0 | — | %1,5 | 6 Haz 2005 |
20İzleyin | CVE-2005-1883İstismar yok | global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.yapig · yapig | Orta5,0 | — | %1,5 | 9 Haz 2005 |
18İzleyin | CVE-2005-1886Kavram kanıtı | Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script yapig · yapig | Orta4,3 | — | %1,9 | 9 Haz 2005 |
18İzleyin | CVE-2006-4421Kavram kanıtı | Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remoteyapig · yapig | Orta4,3 | — | %1,7 | 28 Ağu 2006 |
17İzleyin | CVE-2005-2736İstismar yok | Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF dyapig · yapig | Orta4,3 | — | %1,2 | 30 Ağu 2005 |
- CVE-2005-480037İzleyin
Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administra
KritikCVSS 9,0İstismar yokEPSS %2yapig · yapig31 Ara 2005
- CVE-2005-188131İzleyin
upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attac
YüksekCVSS 7,5Kavram kanıtıEPSS %3yapig · yapig6 Haz 2005
- CVE-2005-188231İzleyin
PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code v
YüksekCVSS 7,5Kavram kanıtıEPSS %2yapig · yapig9 Haz 2005
- CVE-2005-480131İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers
YüksekCVSS 7,5İstismar yokEPSS %1yapig · yapig31 Ara 2005
- CVE-2007-495127İzleyin
PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the
OrtaCVSS 6,8İstismar yokEPSS %1yapig · yapig18 Eyl 2007
- CVE-2005-188426İzleyin
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attacke
OrtaCVSS 6,4Kavram kanıtıEPSS %2yapig · yapig9 Haz 2005
- CVE-2005-479922İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inj
OrtaCVSS 5,1Kavram kanıtıEPSS %6yapig · yapig31 Ara 2005
- CVE-2005-188520İzleyin
view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer
OrtaCVSS 5,0İstismar yokEPSS %1yapig · yapig6 Haz 2005
- CVE-2005-188320İzleyin
global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.
OrtaCVSS 5,0İstismar yokEPSS %1yapig · yapig9 Haz 2005
- CVE-2005-188618İzleyin
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %1yapig · yapig9 Haz 2005
- CVE-2006-442118İzleyin
Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote
OrtaCVSS 4,3Kavram kanıtıEPSS %1yapig · yapig28 Ağu 2006
- CVE-2005-273617İzleyin
Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF d
OrtaCVSS 4,3İstismar yokEPSS %1yapig · yapig30 Ağu 2005