CVE-2005-2319: PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly oth...

Security readout for executives and security teams

CVE-2005-2319 is an old PHP remote file include issue in Yawp 1.0.6 and earlier, used by YaWiki and possibly other products. A remote attacker could influence a configuration path parameter to include arbitrary files. The sources do not provide CVSS, confirmed exploitation, or a clearly stated fixed version. Exposure is most likely in legacy PHP applications that bundled or deployed Yawp 1.0.6 or earlier, especially YaWiki installations. Because the affected component may be embedded in other products, file-level or dependency inventory is needed rather than relying only on package names. Prioritize as a legacy internet-facing application risk. There is no KEV listing or CVSS in the bundle, but the described remote include behavior is severe enough to justify rapid inventory, exposure reduction, and retirement or remediation of affected deployments. Mitigation focus: Inventory PHP applications for Yawp library 1.0.6 or earlier.; Check the Yawp/YaWiki changelog and advisory sources for vendor-supported remediation.; Remove or replace unsupported YaWiki or Yawp deployments where feasible..

Prepared

Jun 29, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.