257 matches found
GuppY CMS 5.0.9 / 5.00.10 CSRF / Shell Upload
!-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Multiple CSRF Vulnerabilities-Privilege escalation/File upload. Other versions may be vulnerable but weren't tested. Date: 2/17/2015 Exploit Author: Brandon Murphy Vendor Homepage: http://freeguppy.org Software Link: Windows-5.00.10...
GuppY CMS 5.0.9 < 5.00.10 - Multiple Cross-Site Request Forgery Vulnerabilities
!-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Multiple CSRF Vulnerabilities-Privilege escalation/File upload. Other versions may be vulnerable but weren't tested. Date: 2/17/2015 Exploit Author: Brandon Murphy Vendor Homepage: http://freeguppy.org Software Link: Windows-5.00.10...
GuppY CMS 5.0.9 & 5.00.10 CSRF / Shell Upload Vulnerabilities
GuppY CMS versions 5.0.9 and 5.00.10 suffer from cross site request forgery and remote shell upload vulnerabilities. !-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Multiple CSRF Vulnerabilities-Privilege escalation/File upload. Other versions may be vulnerable but weren't tested. Date: 2/17/2015...
GuppY CMS 5.0.9 / 5.00.10 Authentication Bypass / Change Email
!-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Authentication bypass/Change email. Other versions may be vulnerable but weren't tested. Date: 2/17/2015 Exploit Author: Brandon Murphy Vendor Homepage: http://freeguppy.org Software Link: Windows-5.00.10...
GuppY CMS 5.0.9 & 5.00.10 Authentication Bypass / Change Email Vulnerabilities
GuppY CMS versions 5.0.9 and 5.00.10 remote authentication bypass and change email exploit. !-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Authentication bypass/Change email. Other versions may be vulnerable but weren't tested. Date: 2/17/2015 Exploit Author: Brandon Murphy Vendor Homepage:...
Guppy CMS 5.0.9/5.00.10 - Authentication Bypass/Change Email
!-- Exploit Title: GuppY CMS 5.0.9 & 5.00.10 Authentication bypass/Change email. Other versions may be vulnerable but weren't tested. Date: 2/17/2015 Exploit Author: Brandon Murphy Vendor Homepage: http://freeguppy.org Software Link: Windows-5.00.10...
GuppY <= 4.5.16 Remote Commands Execution Exploit
No description provided by source...
Guppy <= 4.5.11 (Delete Databases) Remote Denial of Service Exploit
No description provided by source. Change line 30 s/htp/http if you would like to see the logo. /str0ke ?php Guppy = 4.5.11 Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute http://www.KAPDA.ir errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout, 5;...
GuppY 4.5.18 - Blind SQL/XPath Injection Vulnerability
No description provided by source...
GuppY 2.4 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8717/info It has been reported that one of the scripts included with GuppY is vulnerable to an HTML injection attack. The script, postguest.php, does not perform input validation to prevent the inclusion of HTML/script...
GuppY 2.4 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8768/info GuppY is reported to be prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the postguest module of the software. This issue may allow a...
GuppY 4.5 editorTypetool.php meskin Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected comput...
Guppy <= 4.5.9 (REMOTE_ADDR) Remote Commands Execution Exploit
No description provided by source. ?php if magicquotesgpc is off you can inject arbitrary php code from rgod /str0ke ---guppy459xpl.php 17.30 28/11/2005 Guppy =4.5.9 SERVERREMOTEADDR overwrite / remote commands xctn coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in...
GuppY 4.5 dbbatch.php lng Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected comput...
GuppY 4.5 archbatch.php lng Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected comput...
GuppY 4.5 nwlmail.php lng Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected comput...
GuppY 2.4 - Remote File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8769/info GuppY is prone to an issue that could allow a remote attacker to read or write to files on the vulnerable server. This issue presents itself in the tinymsg.php component of the software. The attacker could only...
GuppY跨站脚本和跨站请求伪造漏洞
Bugtraq ID:66318 Guppy是一款来自法国的CMS系统。 Guppy存在跨站脚本和跨站请求伪造漏洞，允许攻击者利用漏洞获取敏感信息或劫持用户会话，或以目标用户上下文进行操作。 0 GuppY 4.6.26 目前没有详细解决方案提供： http://freeguppy.org http://server/guppy/plugins/cryptographp/cryptographp.php?cfg=CRLFInjection...
GuppY 4.6.26 XSS / CRLF Injection
Exploit Title: GuppY 4.6.26 CRLF Injection GuppY 4.6.26 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://freeguppy.org Version : 4.6.26 Tested on: Windows Category: webapps Google Dork: intext:"Powered by GUPPY" + Exploit CRLF:...
CVE-2013-5983
Multiple cross-site scripting XSS vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the 1 "an" parameter to agenda.php or 2 cat parameter to mobile/thread.php...