CVE-2007-4951

概要

参考情報

• arfis.wordpress.com/2007/09/14/rfi-03-yapig-yet-another-php-image-gallery · Exploit
• osvdb.org/42519

yapig のその他の脆弱性

• CVE-2006-4421中 4.3Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote…
• CVE-2005-4801高 7.5Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers…
• CVE-2005-4800緊急 9.0Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administra…
• CVE-2005-4799中 5.1Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inj…
• CVE-2005-2736中 4.3Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF d…