Description
GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" (cleanup.php) and then "Suppression des fichiers d'installation" (delete.php).
References
- 20070311 GuppY v4.0 remote del files/index mailing-list
- 2433 third-party-advisory
- 35085 vdb-entry
- http://forums.avenir-geopolitique.net/viewtopic.php?t=2728