CVE:CVE-2005-1884
CNNVD:CNNVD-200506-063
YaPiG 0.92b0.93u和0.94u版本程序的upload.php脚本中的(1)rmdir指令或 (2)mkdir指令存在目录遍历漏洞，远程攻击者可借助dir参数中的".."(参数中包含'..')创建或删除任意目录。
solution:Upgrade yapig yapig to a higher version than 0.92b,0.93u,0.94u,and avoid the version 0.92b,0.93u,0.94u