CVE-2005-3927

Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts (2) archbatch.php, (3) dbbatch.php, and (4) nwlmail.php.

• http://rgod.altervista.org/guppy459_xpl.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17790Vendor Advisory
• http://securityreason.com/securityalert/212
• http://securitytracker.com/id?1015279Exploit
• http://www.securityfocus.com/archive/1/417899/100/0/threaded
• http://www.securityfocus.com/bid/15610Exploit
• http://www.vupen.com/english/advisories/2005/2635
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23319
• http://rgod.altervista.org/guppy459_xpl.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17790Vendor Advisory
• http://securityreason.com/securityalert/212
• http://securitytracker.com/id?1015279Exploit
• http://www.securityfocus.com/archive/1/417899/100/0/threaded
• http://www.securityfocus.com/bid/15610Exploit
• http://www.vupen.com/english/advisories/2005/2635
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23319

Published

Nov 30, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3921Cross-site scripting (XSS) vulnerability in Cisco IOS Web Se…
• CVE-2005-3922Heap-based buffer overflow in pskcmp.dll in Panda Software A…
• CVE-2005-3923NetObjects Fusion 9 (NOF9) allows remote attackers to obtain…
• CVE-2005-3924SQL injection vulnerability in themes/kategorie/index.php in…
• CVE-2005-3925Multiple SQL injection vulnerabilities in Central Manchester…
• CVE-2005-3926Direct static code injection vulnerability in error.php in G…
• CVE-2005-3928Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows loc…
• CVE-2005-3929Directory traversal vulnerability in the create function in …
• CVE-2005-3930SQL injection vulnerability in index.php in N-13 News 1.2 al…
• CVE-2005-3931SQL injection vulnerability in default.asp in ASP-Rider 1.6 …
• CVE-2005-3932SQL injection vulnerability in okiraku.php in O-Kiraku Nikki…
• CVE-2005-3933SQL injection vulnerability in index.php in 88Script's Event…