CVE Tools
Track your stack

Yapig

9 CVEs tracked since 2005. Since Jun 2005, none of them reached CISA KEV.

Yapig CVEs per month

Jun 2005 to May 2006. Point at a month, or focus the strip and use the arrow keys.
Yapig CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2005-0660
2005-07null or fewer
2005-08null or fewer
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-0530

Products

The products that kept showing up in Yapig's monthly top three, with their CVEs summed over those months.

  1. Yapig92 months

Latest CVEs

The 12 most recently published vulnerabilities affecting Yapig.

  1. CVE-2007-4951PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter. NOTE: this issue has been disputed...6.8
  2. CVE-2006-4421Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote attackers to inject arbitrary web script or HTML via the...4.3
  3. CVE-2005-4801Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as ...7.5
  4. CVE-2005-4800Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery par...9.0
  5. CVE-2005-4799Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage fie...5.1
  6. CVE-2005-2736Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.4.3
  7. CVE-2005-1886Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown paramet...4.3
  8. CVE-2005-1881upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP ...7.5
  9. CVE-2005-1884Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (do...6.4
  10. CVE-2005-1882PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter.7.5
  11. CVE-2005-1883global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.5.0
  12. CVE-2005-1885view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer, which reveals the path in an error message.5.0

The record

Peak rank
#14 in Jun 2005
Busiest month shown
Jun 2005, 6 CVEs
Months with a KEV entry
0 since Jun 2005
Monthly snapshots
2 since 2005
Yapig's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store