257 matches found
CVE-2007-0639
Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via 1 a REMOTEADDR cookie or 2 a cookie specifying an element of the msg array with an error number in the first...
Code injection
Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via 1 a REMOTEADDR cookie or 2 a cookie specifying an element of the msg array with an error number in the first...
CVE-2007-0639
Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via 1 a REMOTEADDR cookie or 2 a cookie specifying an element of the msg array with an error number in the first...
CVE-2007-0639
GuppY 4.5.16 and earlier is affected by multiple static code injection vulnerabilities in error.php that let remote attackers inject arbitrary PHP code into a data/.inc file via cookies (REMOTE_ADDR or msg[...] with an error dimension). Exploitation would impact confidentiality, integrity, and av...
GuppY <= 4.5.16 Remote Commands Execution Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Guppy = 4.5.16 remote commands execution exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: "Site powered by GuppY" | "Site cr驠avec Gupp...
GuppY 4.5.16 - Remote Command Execution
GuppY 4.5.16 - Remote Command Execution 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r...
GuppY <= 4.5.16 Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ================================================= GuppY 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" "...
GuppY 4.5.16 - Remote Command Execution
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result;...
GuppY < 4.5.6a Multiple Vulnerabilities - Active Check
Guppy / EasyGuppY is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Guppy Request Header Injection Vulnerabilities
The remote web server contains a PHP script that allows for arbitrary code execution and cross-site scripting attacks. Description : The remote host is running Guppy, a CMS written in PHP. The remote version of this software does not properly sanitize input to the Referer and User-Agent HTTP...
Directory traversal
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." mixed encoding in the pg parameter...
CVE-2006-1224
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." mixed encoding in the pg parameter...
CVE-2006-1224
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." mixed encoding in the pg parameter...
CVE-2006-1224
CVE-2006-1224 : Directory traversal in GuppY 4.5.11 through dwnld.php allows remote attackers to overwrite arbitrary files via a mixed-encoded "%2E." in the pg parameter. Impact noted as possible partial integrity impact; no remediation details provided in the supplied documents. No exploitation ...
guppyDoS.txt
KAPDA New advisory Vendor: http://www.freeguppy.org Vulnerable: 0 && $tabcounter0/10 == intval$tabcounter0/10 WriteCounterDBSTATSBK, $tabcounter0; //functions.php function WriteCounter$fic,$Dat...
Guppy <= 4.5.11 (Delete Databases) Remote Denial of Service Exploit
No description provided by source. Change line 30 s/htp/http if you would like to see the logo. /str0ke ?php Guppy = 4.5.11 Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute http://www.KAPDA.ir errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",...
Guppy <= 4.5.11 (Delete Databases) Remote Denial of Service Exploit
Exploit for unknown platform in category web applications =================================================================== Guppy Guppy Guppy by trueend5 Computer Security Science Researchers Institute KAPDA table width="90%...
Guppy <= 4.5.11 (Delete Databases) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc =================================================================== Guppy Guppy Guppy by trueend5 Computer Security Science Researchers Institute KAPDA img border="0" src="http://irannetjob.com/pic...
[KAPDA::#33] - GuppY <= 4.5.11 Remote DoS vulnerability
KAPDA New advisory Vendor: http://www.freeguppy.org Vulnerable: = 4.5.11 Bug: Destroy database files Remote DoS vulnerability Exploitation: Remote with browser Exploit: available Description: -------------------- GuppY is a web portal intentionaly designed to be easy to use for you, the final use...
Guppy 4.5.11 - Delete Databases Remote Denial of Service
Change line 30 s/htp/http if you would like to see the logo. /str0ke Guppy = 4.5.11 Remote DOS Exploit Guppy = 4.5.11 Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute KAPDA...