GCVE - cpe:2.3:a:pulsecms:pulse_cms:1.3.2:-:pro:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pulsecms:pulse_cms:1.3.2:-:pro:*:*:*:*:*

part: a version: 1.3.2 update: -

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0993`	vulnerable	2026-06-08 04:54:04.291102	Details available Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Published: 2010-04-09T17:00:00.000Z Updated: 2024-08-07T01:06:52.643Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39046 http://secunia.com/secunia_research/2010-47/ http://www.securityfocus.com/archive/1/510617/100/0/threaded http://pulsecms.com/blog.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0992`	vulnerable	2026-06-08 04:54:04.290627	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete image files, or (3) create blocks. Published: 2010-04-09T17:00:00.000Z Updated: 2024-08-07T01:06:52.605Z Open on db.gcve.eu Reference links http://secunia.com/secunia_research/2010-46/ http://secunia.com/advisories/39046 http://www.securityfocus.com/archive/1/510619/100/0/threaded http://pulsecms.com/blog.php	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.