medium5.0
CVE-2005-2319
PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbi…
Impact
PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yawp | Yawp | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 |
References
- NVD record
- CVE.org record
- http://phpyawp.com/yawiki/index.php?page=ChangeLog
- http://secunia.com/advisories/16049
- http://www.hardened-php.net/advisory-102005.php
- http://www.securityfocus.com/archive/1/404948
- http://www.securityfocus.com/bid/14237
- http://phpyawp.com/yawiki/index.php?page=ChangeLog
- http://secunia.com/advisories/16049
- http://www.hardened-php.net/advisory-102005.php
- http://www.securityfocus.com/archive/1/404948
- http://www.securityfocus.com/bid/14237