Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
yapig yapig 0.95b vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2005-2736
Cross-site scripting (XSS) vulnerability in YaPig 0.95 and previous versions allows remote malicious users to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
Yapig Yapig 0.92b
Yapig Yapig 0.93u
Yapig Yapig 0.94u
Yapig Yapig 0.95
Yapig Yapig 0.95b
605
VMScore
CVE-2007-4951
PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote malicious users to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter. NOTE: this issue has been disputed by CVE, since YAPIG_PATH is defined before use
Yapig Yapig 0.95b
435
VMScore
CVE-2006-4421
Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote malicious users to inject arbitrary web script or HTML via the D_REFRESH_URL parameter.
Yapig Yapig 0.95b
1 EDB exploit
515
VMScore
CVE-2005-4799
Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comment" ...
Yapig Yapig 0.94u
Yapig Yapig 0.95
Yapig Yapig 0.92b
Yapig Yapig 0.93u
Yapig Yapig
1 EDB exploit
668
VMScore
CVE-2005-4801
Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and previous versions allow remote malicious users to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page tha...
Yapig Yapig 0.92b
Yapig Yapig 0.93u
Yapig Yapig 0.94u
Yapig Yapig 0.95
Yapig Yapig
801
VMScore
CVE-2005-4800
Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and previous versions allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code...
Yapig Yapig 0.95
Yapig Yapig
Yapig Yapig 0.92b
Yapig Yapig 0.93u
Yapig Yapig 0.94u
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316
SQL injection
type confusion
CVE-2024-20697
CVE-2024-4344
local
CVE-2024-30043
CVE-2024-3821
CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started