CVE-2007-4951: Yapig

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter. NOTE: this issue has been disputed by CVE, since YAPIG_PATH is defined before use

Affected products

• Yapig Yapig: version 0.95b only

Published 2007-09-18. Last modified 2026-06-16.