« Volver al listado

CVE-2010-0988

Estado: ModificadaMedia (6)—

Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pulsecms — Pulse CMS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0988",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-26T18:30:00.500",
  "references": [
    {
      "url": "http://secunia.com/advisories/39011",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-45/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-51/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.osvdb.org/63166",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.osvdb.org/63168",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510299/100/0/threaded",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510300/100/0/threaded",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/38956",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/advisories/39011",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-45/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-51/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/63166",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/63168",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510299/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510300/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38956",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas den Pulse CMS anteriores a v1.2.3 permiten (1) atacantes remotos escribir en sobre ficheros de su elección y ejecutar código PHP de su elección a través de vectores relativos al manejo  no adecuado de fallos de autenticación por includes/login.php; y permite a usuarios autenticados remotos escribir en ficheros y ejecutar comandos PHP de su elección a través de vectores que implican los parámetros (2) filename y (3) block sobre view.php."
    }
  ],
  "lastModified": "2026-06-16T23:17:16.017",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5C9D304-C593-42ED-883B-6BE31D9DF797",
              "versionEndIncluding": "1.2.2"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB41D7AD-8AF9-4027-BCF3-1756D37CC05F"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05527F85-88E8-40F4-A060-6662A3AFDA7D"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB9E887-A9AC-45B0-BA84-6F5F2F2789C7"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DBCEB5CA-A3B5-4011-B6E7-18345601A9A8"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABFDED36-878A-4DB0-8173-BAC42B17BAF8"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D5DC810-2A15-4C06-B635-F50E41677926"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "214457F1-DAC7-43B9-9AC0-7F31FAB9DCD8"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A40020AF-A3C1-4775-8312-C3A8EDE3FDFC"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A59AE8E0-50A8-4855-B88E-1592A9ACD02D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}