Directory traversal

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the selskin parameter to index.php. NOTE: this can be leveraged for remote file inclusion by including inc/boxleft.inc and specifying a URL...

Directory traversal

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including...

CVE-2007-5844

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the selskin parameter to index.php. NOTE: this can be leveraged for remote file inclusion by including inc/boxleft.inc and specifying a URL...

CVE-2007-5845

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including...

CVE-2007-5845

CVE-2007-5845 affects GuppyY up to 4.6.3 and 4.5.16 and earlier; a directory traversal in error.php allows remote local file inclusion via .. in the id parameter. This can be leveraged to bypass authentication and upload arbitrary files by including admin/inc/upload.inc with specific multipart/fo...

CVE-2007-5845

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including...

CVE-2007-5844

CVE-2007-5844 affects GuppY 4.6.3. A directory traversal flaw in inc/includes.inc allows remote attackers to include and execute arbitrary local files via .. in the selskin parameter to index.php. The issue can be leveraged for remote file inclusion by including inc/boxleft.inc and supplying a UR...

CVE-2007-5844

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the selskin parameter to index.php. NOTE: this can be leveraged for remote file inclusion by including inc/boxleft.inc and specifying a URL...

GuppY inc/includes.inc selskin Parameter Traversal Local File Inclusion

The remote host is running GuppY, a content management system written in PHP. The version of GuppY installed on the remote host fails to sanitize user input to the 'selskin' parameter before using it to include PHP code. Regardless of PHP's 'registerglobals' setting, an unauthenticated, remote...

GuppY Includes.Inc远程文件包含漏洞

GuppY是一款基于PHP的WEB应用程序。 GuppY不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Includes.Inc'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 GuppY 4.6.3 目前没有详细解决方案提供： http://www.freeguppy.org/ http://www.example.com/path/index.php?selskin=..%2Finc%2Fboxleft.inc%00&xposboxL=RFI...

guppy-rfilfi.txt

vuln.: GuppY 4.6.3 includes.inc selskin Remote File Inclusion script info and download: http://www.freeguppy.org/ dork: "Site powered by GuppY" author: irk4zatyahoo.pl greets to: str0ke, rgod, polish under : '-----------------------------------------------------------------------------' code:...

GuppY 4.6.3 - index.php?selskin Remote File Inclusion

GuppY 4.6.3 - index.php?selskin Remote File Inclusion vuln.: GuppY 4.6.3 includes.inc selskin Remote File Inclusion script info and download: http://www.freeguppy.org/ dork: "Site powered by GuppY" author: irk4zatyahoo.pl greets to: str0ke, rgod, polish under :...

GuppY 4.6.3 (includes.inc selskin) Remote File Inclusion Vulnerability

No description provided by source. vuln.: GuppY 4.6.3 includes.inc selskin Remote File Inclusion script info and download: http://www.freeguppy.org/ dork: "Site powered by GuppY" author: irk4zatyahoo.pl greets to: str0ke, rgod, polish under :...

GuppY 4.6.3 (includes.inc selskin) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== GuppY 4.6.3 includes.inc selskin Remote File Inclusion Vulnerability ====================================================================== vuln.: GuppY 4.6.3...

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

vuln.: GuppY 4.6.3 includes.inc selskin Remote File Inclusion script info and download: http://www.freeguppy.org/ dork: "Site powered by GuppY" author: irk4zatyahoo.pl greets to: str0ke, rgod, polish under : '-----------------------------------------------------------------------------' code:...

CVE-2007-1451

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" cleanup.php and then "Suppression des fichiers d'installation" delete.php...

Design/Logic Flaw

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" cleanup.php and then "Suppression des fichiers d'installation" delete.php...

CVE-2007-1451

CVE-2007-1451 affects GuppY 4.0. The vulnerability allows remote attackers to delete arbitrary files by crafting a request to install/install.php and navigating through the installer cleanup options (Installation propre → Suppression des fichiers d'installation → delete.php). The underlying issue...

CVE-2007-1451

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" cleanup.php and then "Suppression des fichiers d'installation" delete.php...

GuppY v4.0 remote del files/index

GuppY v4.0 remote del files/index By : sn0oPy Risk : high site : http://www.freeguppy.org/ Dork : inurl:"/guppy/index.php" exploit : just add install/install.php to the script folder http://www.target.ma/guppy/install/install.php choose "Installation propre" next choose "Suppression des fichiers...