GCVE - cpe:2.3:a:yapig:yapig:0.95:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:yapig:yapig:0.95:*:*:*:*:*:*:*

part: a version: 0.95 update: *

Vendor	Yapig (`61e7eb2a-126c-57b9-bcd8-90fa14705810`)
Product	Yapig (`80806eb7-4447-5d84-8941-fb71810b0489`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-4801`	vulnerable	2026-06-08 04:48:45.147527	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a mod_info action in modify_gallery.php. Published: 2006-05-15T16:00:00.000Z Updated: 2024-08-08T00:01:22.516Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/22753 http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt http://securityreason.com/securityalert/79 http://secunia.com/advisories/17041	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4800`	vulnerable	2026-06-08 04:48:45.147126	Details available Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php. NOTE: this issue is easier to exploit due to a separate CSRF vulnerability. Published: 2006-05-15T16:00:00.000Z Updated: 2024-08-08T00:01:23.386Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/22753 http://www.osvdb.org/19960 http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html http://www.seclab.tuwien.ac.at/advisories/TUVSA-0510-001.txt http://secunia.com/advisories/17041	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4799`	vulnerable	2026-06-08 04:48:45.146645	Details available Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comment" and (2) the img_size field in view.php. NOTE: due to lack of details from the researcher, it is not clear whether the comment vector overlaps CVE-2005-1886. Published: 2006-05-15T16:00:00.000Z Updated: 2024-08-08T00:01:23.262Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/15095 https://exchange.xforce.ibmcloud.com/vulnerabilities/22750 http://www.securityfocus.com/bid/15092 http://www.osvdb.org/19958 http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2736`	vulnerable	2026-06-08 04:48:30.425597	Details available Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. Published: 2005-08-29T04:00:00.000Z Updated: 2024-08-07T22:45:02.161Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14670 http://cedri.cc/advisories/EXIF_XSS.txt http://securitytracker.com/id?1014802 http://secunia.com/advisories/16596/ https://exchange.xforce.ibmcloud.com/vulnerabilities/22020	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Yapig

Notes

PURL mappings

Vulnerability references

Contribute