CVE-2005-1884 | BDVDB-2026-10599 Detail

Description#

Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/15600/
http://www.osvdb.org/17120
http://secwatch.org/advisories/secwatch/20050530_yapig.txt
http://www.securityfocus.com/bid/13877
http://securitytracker.com/id?1014103

Exploit#

No public exploit known

History#

Version 12005-06-07Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.