635 matches found
us.puma.com XSS vulnerability
Open Bug Bounty ID: OBB-59062 Description| Value ---|--- Affected Website:| us.puma.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
PUMA <= 1.0 RC 2 (config.php) Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class PUMARemoteFileIncludePOCBase: vulID = '63959' version = '1' vulDate = '2006-09-09' author = ' ' createDat...
PT-2020-12536
Name of the Vulnerable Software and Affected Versions Puma versions prior to 3.12.6 Puma versions prior to 4.3.5 Description A client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the clie...
PT-2022-7650
Name of the Vulnerable Software and Affected Versions Puma versions prior to 4.3.12 Puma versions prior to 5.6.4 Description The issue is related to the handling of HTTP requests in Puma, a server for Ruby/Rack applications. When Puma is used behind a proxy that does not properly validate incomin...
PT-2021-8119
Name of the Vulnerable Software and Affected Versions Puma versions prior to 5.5.1 and 4.3.9 Description The issue is related to HTTP request smuggling when using Puma with a proxy that forwards HTTP header values containing the LF character. This could allow a client to smuggle a request through...
puma10.txt
+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpRFI.htm + +-------------------------------------------------------------------- + +...
CVE-2006-4713
PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...
CVE-2006-4713
The CVE-2006-4713 entry describes a PHP remote file inclusion in PSYWERKS PUMA 1.0 RC2, specifically in config.php, where an attacker can supply a URL in the fpath parameter to execute arbitrary PHP code on the affected server. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network a...
CVE-2006-4713
PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...
CVE-2006-4713: Undefined Security Weakness
PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...
PUMA 1.0 RC 2 (config.php) Remote File Inclusion
+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpRFI.htm + +-------------------------------------------------------------------- + +...
PUMA <= 1.0 RC 2 (config.php) Remote File Include Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpR FI.htm +...
PUMA 1.0 RC 2 - config.php Remote File Inclusion
PUMA 1.0 RC 2 - config.php Remote File Inclusion +-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpR FI.htm +...
PUMA <= 1.0 RC 2 (config.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== PUMA Declare $fpath! + - Deny direct access to config.php + - or modify code: + + if!isset$REQUEST'fpath' && !isset$GET'fpath' && !isset$POST'fpath' + //code of org. config.ph...
PUMA 1.0 RC 2 - 'config.php' Remote File Inclusion
+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpR FI.htm + +-------------------------------------------------------------------- + ...