CVE-2005-2319

Summary

PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/14237
• http://www.securityfocus.com/archive/1/404948
• http://secunia.com/advisories/16049
• http://phpyawp.com/yawiki/index.php?page=ChangeLog
• http://www.hardened-php.net/advisory-102005.php

References

• http://www.securityfocus.com/bid/14237
• http://www.securityfocus.com/archive/1/404948
• http://secunia.com/advisories/16049
• http://phpyawp.com/yawiki/index.php?page=ChangeLog
• http://www.hardened-php.net/advisory-102005.php

• ←Previous
• Next→