vulnwire
7.5high

CVE-2005-18811 exploit

upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote atta…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.4%
percentile 89%
Public exploits
1
Exploit-DB

upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.

Exploit prediction (EPSS)

3.43% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

Exploits and detections

  • EDB-25792 YaPiG 0.9x - Local/Remote File Inclusion · webapps · 2005-06-06

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-434 Unrestricted Upload of File with Dangerous Type

References

  • secunia.com /advisories/15600/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /17115 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secwatch.org /advisories/secwatch/20050530_yapig.txt · x_refsource_MISC, x_transferred
  • securitytracker.com /id?1014103 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.