EUVD-2005-3156

Malware in sbrugna...

EasyGuppy 4.5.4/4.5.5 Printfaq.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14984/info EasyGuppy is prone to a directory traversal vulnerability. The application fails to properly sanitize input supplied through HTTP POST requests or cookies. Exploitation of this vulnerability could lead to a los...

GuppY < 4.5.6a Multiple Vulnerabilities

The remote host is running GuppY / EasyGuppY, a CMS written in PHP. The version of Guppy / EasyGuppY installed on the remote host fails to sanitize user-supplied input to the 'pg' field in the 'printfaq.php' script. An attacker can exploit this flaw to launch cross-site scripting and possibly...

guppyTraverse.txt

BID 14752 is not only an XSS vulnerability, the real problem is a directory transversal flaw and affects Guppy versions less than 4.5.6a. PoC works for versions alertXSS" you receive an error that PHP can't include the file and the javascript gets executed. This assumes registerglobals and...

CVE-2005-3156

Directory traversal vulnerability in printfaq.php in EasyGuppy Guppy for Windows 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal...

CVE-2005-3156

GuppY / EasyGuppY (Windows) versions 4.5.4 and 4.5.5 are vulnerable to a directory traversal in printfaq.php via the pg parameter. The input is cleansed for XSS but not for traversal, allowing reading of arbitrary files. Multiple references (NVD CVE-2005-3156, OpenVAS/Nessus plugin) confirm the i...

CVE-2005-3156

Directory traversal vulnerability in printfaq.php in EasyGuppy Guppy for Windows 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal...

EasyGuppy 4.5.44.5.5 - Printfaq.php Directory Traversal

EasyGuppy 4.5.44.5.5 - Printfaq.php Directory Traversal source: https://www.securityfocus.com/bid/14984/info EasyGuppy is prone to a directory traversal vulnerability. The application fails to properly sanitize input supplied through HTTP POST requests or cookies. Exploitation of this vulnerabili...