VULNERABILITY INTELLIGENCE

CVE-2005-1884

CVSS score6.4 MEDIUM
EPSS probability2.57%
CISA KEVNot currently listed
Published2005-06-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P

Description

Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.

Primary references