CVE-2010-0993 Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an....
MediumCVSS 6.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pulsecms pulse cms | = 1.2.2 | No fix listed |
| pulsecms pulse cms | = 1.2.3 | No fix listed |
| pulsecms pulse cms | = 1.3.2 | No fix listed |
References
- pulsecms.com patch vendor-advisory
- 39046 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 20100409 Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability mailing-list