CVE-2010-4330

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to index.php...

Pulse CMS Basic Local File Include Vulnerability

Pulse CMS Basic is prone to a local file-include vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pulsecms:pulsecms...

Pulse CMS Basic Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== Pulse CMS Basic Local File Inclusion Vulnerability ================================================== I. DESCRIPTION --------------------------------------- A vulnerability exists in the...

Pulse CMS Basic Local File Include Vulnerability

Pulse CMS Basic is prone to a local file-include vulnerability. An attacker can exploit this issue to include arbitrary local files and execute PHP code on the affected computer in the context of the webserver process. This may facilitate a compromise of the application and the underlying system;...

Pulse CMS Basic - Local File Inclusion

Pulse CMS Basic - Local File Inclusion 'Pulse CMS Basic' Local File Inclusion Vulnerability CVE-2010-4330 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'includes/controller.php' script that allows for arbitrary local...

Pulse CMS Basic 1.2.8 Local File Inclusion

'Pulse CMS Basic' Local File Inclusion Vulnerability CVE-2010-4330 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'includes/controller.php' script that allows for arbitrary local file inclusion due to a null-byte...

Pulse CMS Basic - Local File Inclusion

'Pulse CMS Basic' Local File Inclusion Vulnerability CVE-2010-4330 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'includes/controller.php' script that allows for arbitrary local file inclusion due to a null-byte...

Pulse CMS view.php页面跨站请求伪造漏洞

BUGTRAQ ID: 38356 CVE ID: CVE-2010-0992 Pulse是一个Web应用程序开发框架和门户网站搭建解决方案。 Pulse CMS没有执行充分的有效性检查便允许用户通过HTTP请求执行某些操作，如果已登录用户访问了恶意网站就会允许远程攻击者劫持用户的认证，代表该用户执行上传图形或删除文件或创建块等请求。 Pulse CMS Pulse CMS Basic 1.2.3 Pulse CMS Pulse CMS Basic 1.2.2 厂商补丁： Pulse CMS --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Secunia Research: Pulse CMS Cross-Site Request Forgery

====================================================================== Secunia Research 08/04/2010 - Pulse CMS Cross-Site Request Forgery - ====================================================================== Table of Contents Affected Software......................................................

Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability

====================================================================== Secunia Research 08/04/2010 - Pulse CMS Arbitrary File Upload Vulnerability - ====================================================================== Table of Contents Affected...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that 1 upload image files, 2 delete image files, or 3 create blocks...

Unrestricted file upload

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified...

CVE-2010-0993

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified...

Unrestricted file upload

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory, a different...

CVE-2010-1334

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory, a different...

CVE-2010-0992

Multiple cross-site request forgery CSRF vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that 1 upload image files, 2 delete image files, or 3 create blocks...

CVE-2010-0993

Pulse CMS disclosures (CVE-2010-0993) describe an unrestricted file upload in Pulse CMS Basic 1.2.2/1.2.3 and possibly Pulse Pro before 1.3.2. An authenticated user can upload a file with an executable extension and access it via a direct URL to the file in a web-root directory, allowing remote c...

CVE-2010-0993

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified...

CVE-2010-0992

Multiple cross-site request forgery CSRF vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that 1 upload image files, 2 delete image files, or 3 create blocks...

CVE-2010-1334

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory, a different...