VYPR
Unrated severityNVD Advisory· Published Mar 14, 2006· Updated Apr 16, 2026

CVE-2006-1224

CVE-2006-1224

Description

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.

Affected products

11
  • Guppy/Guppy11 versions
    cpe:2.3:a:guppy:guppy:2.4:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:guppy:guppy:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:2.4_p1:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:2.4_p3:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:2.4_p4:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:4.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:4.5.3a:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:4.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:4.5.9:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:4.5.10:*:*:*:*:*:*:*
    • cpe:2.3:a:guppy:guppy:4.5.11:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

11

News mentions

0

No linked articles in our index yet.