Unrated severityNVD Advisory· Published Dec 7, 2010· Updated Apr 29, 2026
CVE-2010-4330
CVE-2010-4330
Description
Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to index.php.
Affected products
16cpe:2.3:a:pulsecms:pulse_cms:1.01:-:basic:*:*:*:*:*+ 15 more
- cpe:2.3:a:pulsecms:pulse_cms:1.01:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.0:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.15:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.16:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.17:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.18:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.1:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.1:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.2:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.3:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.4:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.5:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.6:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.7:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:*:-:basic:*:*:*:*:*range: <=1.2.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- osvdb.org/69622nvdExploit
- www.exploit-db.com/exploits/15691nvdExploit
- www.securityfocus.com/bid/45186nvdExploit
- secunia.com/advisories/42462nvdVendor Advisory
- www.vupen.com/english/advisories/2010/3128nvdVendor Advisory
- pulsecms.com/release-notes.phpnvd
- www.securityfocus.com/archive/1/515029/100/0/threadednvd
- www.uncompiled.com/2010/12/pulse-cms-basic-local-file-inclusion-vulnerability-cve-2010-4330/nvd
News mentions
0No linked articles in our index yet.