CVE-2010-0988

no score yetEPSS 1.2%

pulsecms pulse cms: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2010-03-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pulsecms:pulse_cms

References

http://secunia.com/advisories/39011
http://secunia.com/secunia_research/2010-45/
http://secunia.com/secunia_research/2010-51/
http://www.osvdb.org/63166
http://www.osvdb.org/63168

Check your stack JSON