Vulnerability Database

291,049

Total vulnerabilities in the database

CVE-2010-0992

Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete image files, or (3) create blocks.

  • Published: Apr 9, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-0992
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
pulsecms / pulse_cms 1.3.2 1.3.2.x
pulsecms / pulse_cms 1.2.3 1.2.3.x
pulsecms / pulse_cms 1.2.2 1.2.2.x