CVE-2010-0988 | BDVDB-2026-40898 Detail
Description#
Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/510300/100/0/threaded
- http://secunia.com/secunia_research/2010-45/
- http://secunia.com/secunia_research/2010-51/
- http://www.osvdb.org/63168
- http://www.securityfocus.com/bid/38956
- http://www.osvdb.org/63166
- http://www.securityfocus.com/archive/1/510299/100/0/threaded
- http://secunia.com/advisories/39011
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.