CVE-2005-1884

Published: Jun 9, 2005Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.

Affected (3)

Products: Yapig: Yapig

Yapig

1 product

Yapig

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Yapig Yapig	Version 0.92b
Yapig Yapig	Version 0.93u
Yapig Yapig	Version 0.94u

References (10)

http://secunia.com/advisories/15600/

Source: cve@mitre.org

http://securitytracker.com/id?1014103

Source: cve@mitre.org

http://secwatch.org/advisories/secwatch/20050530_yapig.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/17120

Source: cve@mitre.org

http://www.securityfocus.com/bid/13877

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/15600/