65 matches found
CVE-2010-1334
Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory, a different...
CVE-2010-1334
Pulse CMS Basic 1.2.4 is affected by an Unrestricted file upload vulnerability that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension and then accessing it via a direct request to the file in an unspecified di...
CVE-2010-1298
Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read arbitrary files via directory traversal sequences in the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Directory traversal
Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read arbitrary files via directory traversal sequences in the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-1298
Summary of CVE-2010-1298 : A directory traversal vulnerability exists in Pulse CMS 1.2.2, specifically in view.php, where an attacker can read arbitrary files by manipulating the f parameter in directory traversal sequences. The issue is documented across multiple sources (NVD, Red Hat, CVE List,...
CVE-2010-1298
Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read arbitrary files via directory traversal sequences in the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-0988
Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow 1 remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and...
Directory traversal
Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow 1 remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and...
CVE-2010-0989
Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter...
CVE-2010-0989
Pulse CMS contains a directory traversal vulnerability in delete.php (f parameter) affecting versions prior to 1.2.3. Exploitation allows remote authenticated users to delete arbitrary files on the server via directory traversal sequences. Severity is evidenced as moderately critical in Secunia’s...
CVE-2010-0988
CVE-2010-0988 affects Pulse CMS prior to 1.2.3. The issue comprises two related vulnerabilities: (1) an improper handling of login failures in includes/login.php that enables remote attackers to write arbitrary files and execute PHP code in the web root, and (2) an issue in viewing content where ...
CVE-2010-0988
Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow 1 remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and...
CVE-2010-0989
Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter...
Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability
====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability
====================================================================== Secunia Research 24/03/2010 - Pulse CMS Arbitrary File Deletion Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability
====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability
====================================================================== Secunia Research 24/03/2010 - Pulse CMS Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...