YaPiG 0.94u
Approved changes feed: RSS · Atom
cpe:2.3:a:yapig:yapig:0.94u:*:*:*:*:*:*:*part: a version: 0.94u update: *
| Vendor | Yapig (61e7eb2a-126c-57b9-bcd8-90fa14705810) |
|---|---|
| Product | Yapig (80806eb7-4447-5d84-8941-fb71810b0489) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-4801 |
vulnerable | 2026-06-08 04:48:45.147510 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a mod_info action in modify_gallery.php.
Published: 2006-05-15T16:00:00.000Z
Updated: 2024-08-08T00:01:22.516Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4800 |
vulnerable | 2026-06-08 04:48:45.147109 |
Details available
Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php. NOTE: this issue is easier to exploit due to a separate CSRF vulnerability.
Published: 2006-05-15T16:00:00.000Z
Updated: 2024-08-08T00:01:23.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4799 |
vulnerable | 2026-06-08 04:48:45.146129 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comment" and (2) the img_size field in view.php. NOTE: due to lack of details from the researcher, it is not clear whether the comment vector overlaps CVE-2005-1886.
Published: 2006-05-15T16:00:00.000Z
Updated: 2024-08-08T00:01:23.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2736 |
vulnerable | 2026-06-08 04:48:30.424493 |
Details available
Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
Published: 2005-08-29T04:00:00.000Z
Updated: 2024-08-07T22:45:02.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1886 |
vulnerable | 2026-06-08 04:48:27.733682 |
Details available
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameters when posting a new comment.
Published: 2005-06-07T04:00:00.000Z
Updated: 2024-09-16T22:50:32.859Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1885 |
vulnerable | 2026-06-08 04:48:27.733356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1884 |
vulnerable | 2026-06-08 04:48:27.733043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1882 |
vulnerable | 2026-06-08 04:48:27.732427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1881 |
vulnerable | 2026-06-08 04:48:27.732025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.