Lucene search
FlexeraCVE-2010-0989HistoryMar 26, 2010 - 6:30 p.m.
CVE-2010-0989
2010-03-2618:30:00
CWE-22
flexera
web.nvd.nist.gov
30
cve-2010-0989
directory traversal
pulse cms
security vulnerability
delete.php
remote authentication
nvd
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
60.0%
Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter.
Affected configurations
Node
pulsecmspulse_cmsRange≤1.2.2
ORpulsecmspulse_cmsMatch1.0-
ORpulsecmspulse_cmsMatch1.1
ORpulsecmspulse_cmsMatch1.01
ORpulsecmspulse_cmsMatch1.2
ORpulsecmspulse_cmsMatch1.2.1
ORpulsecmspulse_cmsMatch1.15
ORpulsecmspulse_cmsMatch1.16
ORpulsecmspulse_cmsMatch1.17
ORpulsecmspulse_cmsMatch1.18
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pulsecms | pulse_cms | * | cpe:2.3:a:pulsecms:pulse_cms:*:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.0 | cpe:2.3:a:pulsecms:pulse_cms:1.0:-:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.1 | cpe:2.3:a:pulsecms:pulse_cms:1.1:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.01 | cpe:2.3:a:pulsecms:pulse_cms:1.01:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.2 | cpe:2.3:a:pulsecms:pulse_cms:1.2:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.2.1 | cpe:2.3:a:pulsecms:pulse_cms:1.2.1:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.15 | cpe:2.3:a:pulsecms:pulse_cms:1.15:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.16 | cpe:2.3:a:pulsecms:pulse_cms:1.16:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.17 | cpe:2.3:a:pulsecms:pulse_cms:1.17:*:*:*:*:*:*:* |
| pulsecms | pulse_cms | 1.18 | cpe:2.3:a:pulsecms:pulse_cms:1.18:*:*:*:*:*:*:* |
Related
securityvulns
securityvulns
Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability
2010-03-24 00:00:00
cvelist
cvelist
CVE-2010-0989
2010-03-26 18:00:00
nvd
nvd
CVE-2010-0989
2010-03-26 18:30:00
prion
prion
Directory traversal
2010-03-26 18:30:00
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
60.0%
Related for CVE-2010-0989