CVE-2010-0989

no score yetEPSS 1.3%

Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2010-03-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pulsecms:pulse_cms

References

http://secunia.com/advisories/39011
http://secunia.com/secunia_research/2010-48/
http://www.osvdb.org/63167
http://www.securityfocus.com/archive/1/510307/100/0/threaded
http://www.securityfocus.com/bid/38947

Check your stack JSON