CVE-2005-4800: Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow...

Security readout for executives and security teams

YaPIG 0.95b and earlier allowed an authenticated administrator to place PHP code into a gallery information file. If abused, this could let attacker-controlled code run on the web server. The CVE notes a separate CSRF issue may make abuse easier by targeting an administrator. Exposure is limited to installations of Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier. Risk is highest where the admin interface is reachable from untrusted networks or active administrator sessions could be targeted. Prioritize confirmed legacy YaPIG systems because successful abuse can become server-side code execution. If no YaPIG deployment exists, no direct business exposure is indicated by this CVE. Mitigation focus: Inventory any YaPIG deployments and confirm exact version.; Remove or replace unsupported YaPIG installations where feasible.; Restrict YaPIG administration access to trusted networks and users..

Prepared

Jun 29, 2026, 12:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.