CVE-2005-1884 Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot d...
MediumCVSS 6.4
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yapig | = 0.92b | No fix listed |
| yapig | = 0.93u | No fix listed |
| yapig | = 0.94u | No fix listed |
References
- 15600 third-party-advisory
- 1014103 vdb-entry
- secwatch.org exploit vendor-advisory
- 17120 vdb-entry
- 13877 exploit vdb-entry