CVE-2006-1224: Guppy

Low severity, CVSS 2.6. EPSS: 3.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.

Affected products

• Guppy Guppy: version 2.4 only; version 2.4_p1 only; version 2.4_p3 only; version 2.4_p4 only; version 4.5 only; version 4.5.3 only; …

Published 2006-03-14. Last modified 2026-06-16.