medium5.5
CVE-2010-0989
Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal s…
Impact
Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pulsecms | Pulse Cms | through 1.2.2 Versions 1.0, 1.1, 1.01, 1.2, 1.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/39011
- http://secunia.com/secunia_research/2010-48/
- http://www.osvdb.org/63167
- http://www.securityfocus.com/archive/1/510307/100/0/threaded
- http://www.securityfocus.com/bid/38947
- http://secunia.com/advisories/39011
- http://secunia.com/secunia_research/2010-48/
- http://www.osvdb.org/63167
- http://www.securityfocus.com/archive/1/510307/100/0/threaded
- http://www.securityfocus.com/bid/38947