Unrated severityNVD Advisory· Published Nov 15, 2007· Updated Jun 16, 2026

CVE-2007-5994

Description

PHP remote file inclusion vulnerability in check_noimage.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the config[path_src_include] parameter.

Affected products

Yappa Ng/Yappa Ng
cpe:2.3:a:yappa-ng:yappa-ng:2.3.2:*:*:*:*:*:*:*
Fritz Berger/yet another php photo album - next generation (yappa-ng)llm-fuzzy
Range: =2.3.2
Fritz Berger/yappa-ngllm-fuzzy
Range: =2.3.2

Patches

Vulnerability mechanics

References

osvdb.org/39727nvd
packetstormsecurity.org/0711-exploits/yappa-ng-rfi.txtnvd
www.securityfocus.com/bid/26398nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000