CVE-2007-5844

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .

published November 6, 2007

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the selskin parameter to index.php. NOTE: this can be leveraged for remote file inclusion by including inc/boxleft.inc and specifying a URL in the xposbox[L][] array parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02347 · 83.4th percentile
Published
2007-11-06T21:00Z
EPSS history
Timeline
  • 06 NOV 21:00Z
    Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .
    cvelistv5