CVE-2005-2319 | BDVDB-2026-11697 Detail

Description#

PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/14237
http://www.securityfocus.com/archive/1/404948
http://secunia.com/advisories/16049
http://phpyawp.com/yawiki/index.php?page=ChangeLog
http://www.hardened-php.net/advisory-102005.php

Exploit#

No public exploit known

History#

Version 12005-07-19Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.