EUVD-2005-3156

Malware in sbrugna...

CVE-2005-3156

GuppY / EasyGuppY (Windows) versions 4.5.4 and 4.5.5 are vulnerable to a directory traversal in printfaq.php via the pg parameter. The input is cleansed for XSS but not for traversal, allowing reading of arbitrary files. Multiple references (NVD CVE-2005-3156, OpenVAS/Nessus plugin) confirm the i...

CVE-2005-3156

Directory traversal vulnerability in printfaq.php in EasyGuppy Guppy for Windows 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal...

CVE-2005-3156: Undefined Security Weakness

Directory traversal vulnerability in printfaq.php in EasyGuppy Guppy for Windows 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal...

CVE-2005-2853: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pg parameter to printfaq.php, or the 2 Referer or 3 User-Agent HTTP headers, which are not properly handled by error.php...