« Back to list

CVE-2010-0988

Status: ModifiedMedium (6)—

Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Pulsecms — Pulse CMS

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2010-0988",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-26T18:30:00.500",
  "references": [
    {
      "url": "http://secunia.com/advisories/39011",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-45/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-51/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.osvdb.org/63166",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.osvdb.org/63168",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510299/100/0/threaded",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510300/100/0/threaded",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/38956",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/advisories/39011",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-45/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-51/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/63166",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/63168",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510299/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510300/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38956",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas den Pulse CMS anteriores a v1.2.3 permiten (1) atacantes remotos escribir en sobre ficheros de su elección y ejecutar código PHP de su elección a través de vectores relativos al manejo  no adecuado de fallos de autenticación por includes/login.php; y permite a usuarios autenticados remotos escribir en ficheros y ejecutar comandos PHP de su elección a través de vectores que implican los parámetros (2) filename y (3) block sobre view.php."
    }
  ],
  "lastModified": "2026-06-16T23:17:16.017",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5C9D304-C593-42ED-883B-6BE31D9DF797",
              "versionEndIncluding": "1.2.2"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB41D7AD-8AF9-4027-BCF3-1756D37CC05F"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05527F85-88E8-40F4-A060-6662A3AFDA7D"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB9E887-A9AC-45B0-BA84-6F5F2F2789C7"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DBCEB5CA-A3B5-4011-B6E7-18345601A9A8"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABFDED36-878A-4DB0-8173-BAC42B17BAF8"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D5DC810-2A15-4C06-B635-F50E41677926"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "214457F1-DAC7-43B9-9AC0-7F31FAB9DCD8"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A40020AF-A3C1-4775-8312-C3A8EDE3FDFC"
            },
            {
              "criteria": "cpe:2.3:a:pulsecms:pulse_cms:1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A59AE8E0-50A8-4855-B88E-1592A9ACD02D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}