CVE-2005-3927
GuppY <= 4.5.9 - Directory Traversal and Arbitrary File Inclusion via meskin or lng Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2005-3927. PoCs published by [email protected].
AI-analyzed exploit summary This exploit demonstrates a local file inclusion vulnerability in GuppY 4.5.9 and prior versions. It uses directory traversal sequences and NULL characters to read arbitrary files, such as boot.ini, from the server.
Description
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts (2) archbatch.php, (3) dbbatch.php, and (4) nwlmail.php.
Exploits (4)
This exploit demonstrates a local file inclusion vulnerability in GuppY 4.5.9 and prior versions. It uses directory traversal sequences and NULL characters to read arbitrary files, such as boot.ini, from the server.
This exploit demonstrates a directory traversal vulnerability in GuppY 4.5.9 and prior, allowing arbitrary file disclosure via crafted path traversal sequences in the 'meskin' parameter.
The code describes a local file inclusion (LFI) vulnerability in GuppY 4.5.9 and prior, allowing arbitrary file reads via directory traversal sequences and NULL bytes. No executable exploit code is provided, only URLs demonstrating the vulnerability.
This is a writeup describing a local file inclusion (LFI) vulnerability in GuppY 4.5.9 and prior versions. The vulnerability allows an attacker to read arbitrary files on the server using directory traversal sequences and NULL characters.