CVE-2005-1884
published 2005-06-09CVE-2005-1884: Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or…
PriorityP433medium6.4CVSS 2.0
AVNACLAuNCNIPAP
EXPLOIT
EPSS
2.57%
83.2th percentile
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| yapig | yapig | — | — |
| yapig | yapig | — | — |
| yapig | yapig | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/15600/http://securitytracker.com/id?1014103http://secwatch.org/advisories/secwatch/20050530_yapig.txthttp://www.osvdb.org/17120http://www.securityfocus.com/bid/13877http://secunia.com/advisories/15600/http://securitytracker.com/id?1014103http://secwatch.org/advisories/secwatch/20050530_yapig.txthttp://www.osvdb.org/17120http://www.securityfocus.com/bid/13877
2005-06-09
Published