CVE-2005-3927

GuppY <= 4.5.9 - Directory Traversal and Arbitrary File Inclusion via meskin or lng Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 4 public exploits for CVE-2005-3927. PoCs published by [email protected].

AI-analyzed exploit summary This exploit demonstrates a local file inclusion vulnerability in GuppY 4.5.9 and prior versions. It uses directory traversal sequences and NULL characters to read arbitrary files, such as boot.ini, from the server.

Description

Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts (2) archbatch.php, (3) dbbatch.php, and (4) nwlmail.php.

Exploits (4)

exploitdb WORKING POC VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/26642

This exploit demonstrates a local file inclusion vulnerability in GuppY 4.5.9 and prior versions. It uses directory traversal sequences and NULL characters to read arbitrary files, such as boot.ini, from the server.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: GuppY 4.5.9 and prior versions
No auth needed
Prerequisites: Access to the target web server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/26639

This exploit demonstrates a directory traversal vulnerability in GuppY 4.5.9 and prior, allowing arbitrary file disclosure via crafted path traversal sequences in the 'meskin' parameter.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: GuppY 4.5.9 and prior
No auth needed
Prerequisites: Access to the target web application
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/26641

The code describes a local file inclusion (LFI) vulnerability in GuppY 4.5.9 and prior, allowing arbitrary file reads via directory traversal sequences and NULL bytes. No executable exploit code is provided, only URLs demonstrating the vulnerability.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: GuppY 4.5.9 and prior
No auth needed
Prerequisites: Access to the target web server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/26640

This is a writeup describing a local file inclusion (LFI) vulnerability in GuppY 4.5.9 and prior versions. The vulnerability allows an attacker to read arbitrary files on the server using directory traversal sequences and NULL characters.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: GuppY 4.5.9 and prior versions
No auth needed
Prerequisites: Network access to the target server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015279
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/23319
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/417899/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17790
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/212
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15610
Exploit, Vendor Advisory x_refsource_misc
http://rgod.altervista.org/guppy459_xpl.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2635

Scores

EPSS 0.0879
EPSS Percentile 94.6%

Details

Status published
Products (5)
guppy/guppy 4.5
guppy/guppy 4.5.3
guppy/guppy 4.5.3a
guppy/guppy 4.5.4
guppy/guppy 4.5.9
Published Nov 30, 2005
Tracked Since Feb 18, 2026