Записи guppy
9 опубликованных записей вендора guppy.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 4
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
9 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
32Наблюдать | CVE-2007-0639Proof of concept | Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code guppy · guppy | Высокая7,5 | — | 7,1 % | 31 янв. 2007 г. |
31Наблюдать | CVE-2005-3926Proof of concept | Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackeguppy · guppy | Высокая7,5 | — | 3,1 % | 30 нояб. 2005 г. |
31Наблюдать | CVE-2007-5845Proof of concept | Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary guppy · guppy · CWE-94 | Высокая7,5 | — | 2,9 % | 6 нояб. 2007 г. |
31Наблюдать | CVE-2007-5844Proof of concept | Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files viguppy · guppy · CWE-22 | Высокая7,5 | — | 2,3 % | 6 нояб. 2007 г. |
28Наблюдать | CVE-2005-3927Proof of concept | Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) tguppy · guppy | Средняя6,4 | — | 8,7 % | 30 нояб. 2005 г. |
26Наблюдать | CVE-2007-1451Эксплойта нет | GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propreguppy · guppy | Средняя6,4 | — | 2,2 % | 14 мар. 2007 г. |
18Наблюдать | CVE-2013-5983Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML viaguppy · guppy · CWE-79 | Средняя4,3 | — | 2,1 % | 6 февр. 2014 г. |
17Наблюдать | CVE-2005-2853Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTMguppy · guppy | Средняя4,3 | — | 1,1 % | 8 сент. 2005 г. |
11Наблюдать | CVE-2006-1224Proof of concept | Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoguppy · guppy | Низкая2,6 | — | 3,6 % | 14 мар. 2006 г. |
- CVE-2007-063932Наблюдать
Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code
ВысокаяCVSS 7,5Proof of conceptEPSS 7 %guppy · guppy31 янв. 2007 г.
- CVE-2005-392631Наблюдать
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attacke
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %guppy · guppy30 нояб. 2005 г.
- CVE-2007-584531Наблюдать
Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %guppy · guppy6 нояб. 2007 г.
- CVE-2007-584431Наблюдать
Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files vi
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %guppy · guppy6 нояб. 2007 г.
- CVE-2005-392728Наблюдать
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) t
СредняяCVSS 6,4Proof of conceptEPSS 8 %guppy · guppy30 нояб. 2005 г.
- CVE-2007-145126Наблюдать
GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre
СредняяCVSS 6,4Эксплойта нетEPSS 2 %guppy · guppy14 мар. 2007 г.
- CVE-2013-598318Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via
СредняяCVSS 4,3Эксплойта нетEPSS 2 %guppy · guppy6 февр. 2014 г.
- CVE-2005-285317Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTM
СредняяCVSS 4,3Эксплойта нетEPSS 1 %guppy · guppy8 сент. 2005 г.
- CVE-2006-122411Наблюдать
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed enco
НизкаяCVSS 2,6Proof of conceptEPSS 3 %guppy · guppy14 мар. 2006 г.