Skip to content
Noroxi

guppy records

9 published records for vendor guppy.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    9 records
    • CVE-2007-0639
      32Monitor

      Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code

      HighCVSS 7.5Proof of conceptEPSS 7%

      guppy · guppyJan 31, 2007

    • CVE-2005-3926
      31Monitor

      Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attacke

      HighCVSS 7.5Proof of conceptEPSS 3%

      guppy · guppyNov 30, 2005

    • CVE-2007-5845
      31Monitor

      Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary

      HighCVSS 7.5Proof of conceptEPSS 2%

      guppy · guppyNov 6, 2007

    • CVE-2007-5844
      31Monitor

      Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files vi

      HighCVSS 7.5Proof of conceptEPSS 2%

      guppy · guppyNov 6, 2007

    • CVE-2005-3927
      28Monitor

      Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) t

      MediumCVSS 6.4Proof of conceptEPSS 8%

      guppy · guppyNov 30, 2005

    • CVE-2007-1451
      26Monitor

      GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre

      MediumCVSS 6.4No exploitEPSS 2%

      guppy · guppyMar 14, 2007

    • CVE-2013-5983
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 4.3No exploitEPSS 2%

      guppy · guppyFeb 6, 2014

    • CVE-2005-2853
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTM

      MediumCVSS 4.3No exploitEPSS 1%

      guppy · guppySep 8, 2005

    • CVE-2006-1224
      11Monitor

      Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed enco

      LowCVSS 2.6Proof of conceptEPSS 3%

      guppy · guppyMar 14, 2006