EUVD-2005-3156

Malware in sbrugna...

CVE-2005-3156

GuppY / EasyGuppY (Windows) versions 4.5.4 and 4.5.5 are vulnerable to a directory traversal in printfaq.php via the pg parameter. The input is cleansed for XSS but not for traversal, allowing reading of arbitrary files. Multiple references (NVD CVE-2005-3156, OpenVAS/Nessus plugin) confirm the i...

CVE-2005-3156

Directory traversal vulnerability in printfaq.php in EasyGuppy Guppy for Windows 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal...