Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.
Version | Base score | Base severity | Vector |
---|
Hyperlink | Resource Type |
---|
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.
Type | CWE ID | Description |
---|---|---|
text | N/A | n/a |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Hyperlink | Resource |
---|---|
http://securityreason.com/securityalert/569 | third-party-advisory x_refsource_SREASON |
http://www.vupen.com/english/advisories/2006/0936 | vdb-entry x_refsource_VUPEN |
http://www.osvdb.org/23993 | vdb-entry x_refsource_OSVDB |
http://securitytracker.com/id?1015753 | vdb-entry x_refsource_SECTRACK |
http://www.freeguppy.org/?lng=en | x_refsource_CONFIRM |
http://www.securityfocus.com/bid/17068 | vdb-entry x_refsource_BID |
http://www.osvdb.org/23846 | vdb-entry x_refsource_OSVDB |
http://www.kapda.ir/advisory-291.html | x_refsource_MISC |
http://www.securityfocus.com/archive/1/427329/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
https://exchange.xforce.ibmcloud.com/vulnerabilities/25141 | vdb-entry x_refsource_XF |
http://secunia.com/advisories/19222 | third-party-advisory x_refsource_SECUNIA |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Hyperlink | Resource |
---|---|
http://securityreason.com/securityalert/569 | third-party-advisory x_refsource_SREASON x_transferred |
http://www.vupen.com/english/advisories/2006/0936 | vdb-entry x_refsource_VUPEN x_transferred |
http://www.osvdb.org/23993 | vdb-entry x_refsource_OSVDB x_transferred |
http://securitytracker.com/id?1015753 | vdb-entry x_refsource_SECTRACK x_transferred |
http://www.freeguppy.org/?lng=en | x_refsource_CONFIRM x_transferred |
http://www.securityfocus.com/bid/17068 | vdb-entry x_refsource_BID x_transferred |
http://www.osvdb.org/23846 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.kapda.ir/advisory-291.html | x_refsource_MISC x_transferred |
http://www.securityfocus.com/archive/1/427329/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
https://exchange.xforce.ibmcloud.com/vulnerabilities/25141 | vdb-entry x_refsource_XF x_transferred |
http://secunia.com/advisories/19222 | third-party-advisory x_refsource_SECUNIA x_transferred |
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 2.0 | 2.6 | LOW | AV:N/AC:H/Au:N/C:N/I:P/A:N |
CWE ID | Type | Source |
---|---|---|
NVD-CWE-Other | Primary | nvd@nist.gov |