CVE-2005-4801 - CVE House
Back to Database
Status published High CVE-2005-4801

Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a mod_info action in modify_gallery.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4801

Credits & Attribution

No credits recorded in the NVD database.

References

More from yapig

View All →
CVE-2007-4951
PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b...
Medium 6.8
CVE-2006-4421
Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP...
Medium 4.3
CVE-2005-4800
Direct static code injection vulnerability in Yet Another PHP Image...
Critical 9
CVE-2005-4799
Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image...
Medium 5.1
CVE-2005-2736
Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows...
Medium 4.3

Affected Vendor

Affected Software

yapig
Vulnerable Versions:
0, 0.92b, 0.93u, 0.94u, 0.95

Timeline

Official Publish: May 15th, 2006
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.