CVE-2005-1885

YaPiG is a PHP-based image gallery. CVE-2005-1885 affects YaPiG 0.92b/0.93u/0.94u, where view.php accepts a phid parameter that is not required to be an integer, causing an error message that reveals the filesystem path. OpenVAS notes this within YaPiG’s broader set of flaws (including remote/loc...