CVE-2005-1884 EXPLOIT
6.4
MEDIUM · CVSS 2.0 · EPSS 2.6% (pctl 85)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.
Scoring
| CVSS | 6.4 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:P |
| EPSS | 2.57% — more likely to be exploited than 85% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-06-09 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| yapig | yapig |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | YaPiG 0.9x - 'upload.php' Directory Traversal | 2005-06-06 |
References
- http://secunia.com/advisories/15600/
- http://securitytracker.com/id?1014103
- http://secwatch.org/advisories/secwatch/20050530_yapig.txt
- http://www.osvdb.org/17120
- http://www.securityfocus.com/bid/13877
- http://secunia.com/advisories/15600/
- http://securitytracker.com/id?1014103
- http://secwatch.org/advisories/secwatch/20050530_yapig.txt
- http://www.osvdb.org/17120
- http://www.securityfocus.com/bid/13877
→ the Explorer · watch your stack · NVD