Directory Traversal Vulnerability in Fritz Berger's Yappa-NG Photo Album
CVE-2008-4626

Currently unrated

Key Information:

Vendor

Zirkon Box

Status
Yappa-ng
Vendor
CVE Published:
21 October 2008

What is CVE-2008-4626?

A directory traversal vulnerability exists in Fritz Berger's Yappa-NG 2.3.2 and potentially affects versions up to 2.3.3-beta0. When 'magic_quotes_gpc' is disabled, remote attackers can manipulate the 'album' parameter to execute arbitrary local files. This flaw can lead to unauthorized access to sensitive server files, posing significant security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.osvdb.org/49171
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/32325
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/4444
third-party-advisoryx_refsource_SREASON

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.