Lucene search

[email protected]CVE-2010-0993

HistoryApr 09, 2010 - 5:30 p.m.

CVE-2010-0993

2010-04-0917:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2010-0993

pulse cms

file upload

vulnerability

remote code execution

7.5 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.0%

JSON

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

CPENameOperatorVersion
pulsecms:pulse_cmspulsecms pulse cmseq1.3.2
pulsecms:pulse_cmspulsecms pulse cmseq1.2.3
pulsecms:pulse_cmspulsecms pulse cmseq1.2.2

CPE	Name	Operator	Version
pulsecms:pulse_cms	pulsecms pulse cms	eq	1.3.2
pulsecms:pulse_cms	pulsecms pulse cms	eq	1.2.3
pulsecms:pulse_cms	pulsecms pulse cms	eq	1.2.2

References

pulsecms.com/blog.php

secunia.com/advisories/39046

secunia.com/secunia_research/2010-47/

www.securityfocus.com/archive/1/510617/100/0/threaded

7.5 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.0%

JSON

Related for CVE-2010-0993

prion2 securityvulns1 cve1