Login Request a demo
GU
Product
Guppy
by Guppy · last CVE Feb 6, 2014
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Guppy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-5983
–
2%
Feb 6
Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the (1) "an" parameter to agenda.php…
Affected: through 4.6.27; 2.4; 2.4_p1; 2.4_p3; 2.4_p4; 4.0; +9 more
CVE-2007-5845
–
3%
Nov 6
Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a
Affected: through 4.5.16; 4.6.3
CVE-2007-5844
–
2%
Nov 6
Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a
Affected: 4.6.3
CVE-2007-1451
–
2%
Mar 14
GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" (cleanup.php) and then "Suppression…
Affected: 4.0
CVE-2007-0639
–
7%
Jan 31
Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory…
Affected: through 4.5.16
CVE-2006-1224
–
4%
Mar 14
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter
Affected: 2.4; 2.4_p1; 2.4_p3; 2.4_p4; 4.5; 4.5.3; +5 more
CVE-2005-3927
–
9%
Nov 30
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to…
Affected: 4.5; 4.5.3; 4.5.3a; 4.5.4; 4.5.9
CVE-2005-3926
–
3%
Nov 30
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via…
Affected: 4.5; 4.5.3; 4.5.3a; 4.5.4; 4.5.9
CVE-2005-2853
–
1%
Sep 8
Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to…
Affected: 4.5; 4.5.3; 4.5.3a
Showing 9