CVE:CVE-2005-3156
CNNVD:CNNVD-200510-017
EasyGuppy (Guppy for Windows) 4.5.4和4.5.5的printfaq.php存在目录遍历漏洞。远程攻击者可以借助对 XSS净化而非目录遍历的pg参数中的".."(参数中包含'..')序列，读取任意文件。
solution:Upgrade easyguppy easyguppy to a higher version than 4.5.4,4.5.5,and avoid the version 4.5.4,4.5.5