CVE-2010-4330

Опубликовано: 07 дек. 2010

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to index.php.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pulsecms:pulse_cms:*:-:basic:*:*:*:*:*

Версия до 1.2.8 (включая)

cpe:2.3:a:pulsecms:pulse_cms:1.0:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.01:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.1:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2.1:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2.2:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2.3:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2.4:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2.5:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2.6:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.2.7:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.15:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.16:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.17:-:basic:*:*:*:*:*

cpe:2.3:a:pulsecms:pulse_cms:1.18:-:basic:*:*:*:*:*

EPSS

Процентиль: 91%

0.06851

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-cwq3-9m45-v2wc

github

больше 3 лет назад