Unrated severityNVD Advisory· Published Dec 7, 2010· Updated Jun 16, 2026
CVE-2010-4330
CVE-2010-4330
Description
Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to index.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:a:pulsecms:pulse_cms:1.01:-:basic:*:*:*:*:*+ 15 more
- cpe:2.3:a:pulsecms:pulse_cms:1.01:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.0:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.15:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.16:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.17:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.18:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.1:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.1:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.2:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.3:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.4:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.5:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.6:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2.7:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:1.2:-:basic:*:*:*:*:*
- cpe:2.3:a:pulsecms:pulse_cms:*:-:basic:*:*:*:*:*range: <=1.2.8
- Range: <1.2.9
Patches
Vulnerability mechanics
References
8- osvdb.org/69622nvdExploit
- www.exploit-db.com/exploits/15691nvdExploit
- www.securityfocus.com/bid/45186nvdExploit
- secunia.com/advisories/42462nvdVendor Advisory
- www.vupen.com/english/advisories/2010/3128nvdVendor Advisory
- pulsecms.com/release-notes.phpnvd
- www.securityfocus.com/archive/1/515029/100/0/threadednvd
- www.uncompiled.com/2010/12/pulse-cms-basic-local-file-inclusion-vulnerability-cve-2010-4330/nvd
News mentions
0No linked articles in our index yet.