Vulnerabilities

TI-2013-05098 CVE-2013-5983 · GHSA-hx6c-jgjx-4m3c

Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the (1) "an" parameter to agenda.php or (2) cat parameter to mobile/thread.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02177 Published 2014-02-06 No fix listed CWE-79

TI-2007-05611 CVE-2007-5845 · GHSA-qmg5-rx6w-h4h5

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows…

LOW 38

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0298 Published 2007-11-06 No fix listed CWE-94

TI-2007-05610 CVE-2007-5844 · GHSA-5q7x-pp9h-jq3v

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote…

LOW 37

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02347 Published 2007-11-06 No fix listed CWE-22

TI-2007-01393 CVE-2007-1451 · GHSA-pr2h-fm5f-xp6m

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to…

LOW 33

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" (cleanup.php) and then "Suppression des fichiers d'installation" (delete.php).

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02233 Published 2007-03-14 No fix listed

TI-2007-00623 CVE-2007-0639 · GHSA-78xh-24mr-7cpj

Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier…

MEDIUM 43

Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via (1) a REMOTE_ADDR cookie or (2) a co…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07198 Published 2007-01-31 No fix listed

TI-2006-01183 CVE-2006-1224 · GHSA-ph85-9hwj-jp57

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to…

LOW 20

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03691 Published 2006-03-14 No fix listed

TI-2005-03720 CVE-2005-3927 · GHSA-q7ff-8r5v-7hm4

Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote…

MEDIUM 40

Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.08787 Published 2005-11-30 No fix listed

TI-2005-03719 CVE-2005-3926 · GHSA-hw72-fhc8-8qf4

Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when…

LOW 38

Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via the _SERVER[REMOTE_ADDR] parameter, which i…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03116 Published 2005-11-30 No fix listed

TI-2005-02701 CVE-2005-2853 · GHSA-ph8h-gv7g-5q82

Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-09-08 No fix listed

Vulnerabilities

Filters