CVE-2005-3926

Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via the _SERVER[REMOTE_ADDR] parameter, which is injected into a .inc script that is later included by the main script.

• http://rgod.altervista.org/guppy459_xpl.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17790Vendor Advisory
• http://securitytracker.com/id?1015279Exploit
• http://www.securityfocus.com/archive/1/417899/100/0/threaded
• http://www.securityfocus.com/bid/15609Exploit
• http://www.vupen.com/english/advisories/2005/2635
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23318
• http://rgod.altervista.org/guppy459_xpl.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17790Vendor Advisory
• http://securitytracker.com/id?1015279Exploit
• http://www.securityfocus.com/archive/1/417899/100/0/threaded
• http://www.securityfocus.com/bid/15609Exploit
• http://www.vupen.com/english/advisories/2005/2635
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23318

Published

Nov 30, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3920SQL injection vulnerability in Babe Logger 2 allows remote a…
• CVE-2005-3921Cross-site scripting (XSS) vulnerability in Cisco IOS Web Se…
• CVE-2005-3922Heap-based buffer overflow in pskcmp.dll in Panda Software A…
• CVE-2005-3923NetObjects Fusion 9 (NOF9) allows remote attackers to obtain…
• CVE-2005-3924SQL injection vulnerability in themes/kategorie/index.php in…
• CVE-2005-3925Multiple SQL injection vulnerabilities in Central Manchester…
• CVE-2005-3927Multiple directory traversal vulnerabilities in GuppY 4.5.9 …
• CVE-2005-3928Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows loc…
• CVE-2005-3929Directory traversal vulnerability in the create function in …
• CVE-2005-3930SQL injection vulnerability in index.php in N-13 News 1.2 al…
• CVE-2005-3931SQL injection vulnerability in default.asp in ASP-Rider 1.6 …
• CVE-2005-3932SQL injection vulnerability in okiraku.php in O-Kiraku Nikki…