CVE-2005-1884

CVE-2005-1884 affects YaPiG (web-based PHP image gallery) versions 0.92b, 0.93u, and 0.94u. A directory traversal vulnerability exists in upload.php, where the dir parameter can be exploited with .. to create or delete arbitrary directories via rmdir or mkdir commands. Multiple sources (NVD entry...

CVE-2004-1884

CVE-2004-1884 affects Ipswitch WS_FTP Server 4.0.2. The vulnerability is a backdoor: the XXSESS_MGRYY user with a default password can enable remote access, enabling partial confidentiality/integrity/availability impact as indicated by CVSS base vector AV:N/AC:L/Au:N/C:P/I:P/A:P. Public reference...

CVE-2004-1884

Ipswitch WSFTP Server 4.0.2 has a backdoor XXSESSMGRYY username with a default password, which allows remote attackers to gain access...