CVE-2010-0988
- State
- Published
- Severity
- Not scored
- Published
- Mar 26, 2010
- Updated
- Aug 7, 2024
- Reserved
- Mar 18, 2010
Description
Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20100324 Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerabilitymailing-list
- http://secunia.com/secunia_research/2010-45/
- http://secunia.com/secunia_research/2010-51/
- 63168vdb-entry
- 38956vdb-entry
- 63166vdb-entry
- 20100324 Secunia Research: Pulse CMS Arbitrary File Writing Vulnerabilitymailing-list
- 39011third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.