CVE-2005-1886 in YaPiG

Summary

Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameters when posting a new comment.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 06/08/2005
• Disclosure: 06/09/2005
• Moderation: VulDB entry created
• Entries: VDB-25470 (1)
• CPE: ready
• CWE: CWE-80 (Confirmed)
• CVSS: 4.3
• EPSS: 0.01649
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-1886
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-1886
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-1886/