CVE:CVE-2005-4800
CNNVD:CNNVD-200512-994
Yet Another PHP Image Gallery (YaPIG) 0.95b及更早版本存在直接静态代码注入漏洞，远程认证管理员可以通过传递给modify_gallery.php的mod_info操作中的TestGallery参数，将代码注入到guid_info.php中，来注入任意PHP代码。
solution:Upgrade yapig yapig to a higher version than 0.95b,0.92b,0.93u,0.94u,0.95,and avoid the version (,0.95b],0.92b,0.93u,0.94u,0.95