Pulsecms / Pulse Cms
9 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2011-5041 | Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d paramete… | MEDIUM | 4.3 | Dec 30, 2011 |
| CVE-2010-4330 | Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local fil… | MEDIUM | 6.8 | Dec 7, 2010 |
| CVE-2010-1334 | Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executa… | MEDIUM | 6.0 | Apr 9, 2010 |
| CVE-2010-0993 | Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute ar… | MEDIUM | 6.0 | Apr 9, 2010 |
| CVE-2010-0992 | Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to h… | MEDIUM | 6.8 | Apr 9, 2010 |
| CVE-2010-1298 | Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read arbitrary files via directory traversal sequences in the f par… | MEDIUM | 4.0 | Apr 6, 2010 |
| CVE-2010-0989 | Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal s… | MEDIUM | 5.5 | Mar 26, 2010 |
| CVE-2010-0988 | Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vector… | MEDIUM | 6.0 | Mar 26, 2010 |
| CVE-2010-1080 | Cross-site scripting (XSS) vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter. | MEDIUM | 4.3 | Mar 23, 2010 |
Showing 1 to 9 of 9 CVEs