What’s Vulnerable › Vulnerabilities

CVE-2005-2319

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-07-19 · updated 2026-06-16

Description

PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.

Affected products

• Yawp: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+1)

References

• http://phpyawp.com/yawiki/index.php?page=ChangeLog
• http://secunia.com/advisories/16049
• http://www.hardened-php.net/advisory-102005.php
• http://www.securityfocus.com/archive/1/404948
• http://www.securityfocus.com/bid/14237
• http://phpyawp.com/yawiki/index.php?page=ChangeLog
• http://secunia.com/advisories/16049
• http://www.hardened-php.net/advisory-102005.php
• http://www.securityfocus.com/archive/1/404948
• http://www.securityfocus.com/bid/14237

Get alerted when CVE-2005-2319 or the next vulnerability affects your stack