7.5
CVSSv2

CVE-2006-4713

Published: 12/09/2006 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote malicious users to execute arbitrary PHP code via a URL in the fpath parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

psywerks puma 1.0_rc2

Exploits

+-------------------------------------------------------------------- + + PUMA 10 RC 2 (configphp) Remote File Inclusion + + Original advisory: + wwwbb-pcsecurityde/Websecurity/415/org/PUMA_10_RC_2_(configphp)_R FIhtm + +-------------------------------------------------------------------- + + Affected Software : PUMA 10 RC 2 + Vened ...