CVE-2012-5304

Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code into…

published October 6, 2012

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code into functions/db_connect.php via unspecified vectors. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01357 · 71.3th percentile
Published
2012-10-06T22:00Z
EPSS history
Timeline
  • 06 OCT 22:00Z
    Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code into…
    cvelistv5