RCE in Yapig

CVE-2007-4951

PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter. NOTE: this issue has been disputed by CVE, since YAPIG_PATH is defined before use

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.012 (65.5th percentile) — read the EPSS interpretation.

Affected products

  • Yapig — versions 0.95b
  • N/a — versions n/a

Weakness classification (CWE)

References