• info
• discussion
• exploit
• solution
• references

EasyGuppy Printfaq.PHP Directory Traversal Vulnerability

EasyGuppy is prone to a directory traversal vulnerability.

The application fails to properly sanitize input supplied through HTTP POST requests or cookies.

Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed to an attacker.