CVE-2010-0992

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete image files, or (3) create blocks.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://pulsecms.com/blog.phpPatch, Vendor Advisory
http://secunia.com/advisories/39046Vendor Advisory
http://secunia.com/secunia_research/2010-46/Vendor Advisory
http://www.securityfocus.com/archive/1/510619/100/0/threaded
http://pulsecms.com/blog.phpPatch, Vendor Advisory
http://secunia.com/advisories/39046Vendor Advisory
http://secunia.com/secunia_research/2010-46/Vendor Advisory
http://www.securityfocus.com/archive/1/510619/100/0/threaded

Timeline

Published: Apr 9, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-09936.0Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated CVE-2010-09946.8Multiple buffer overflows in src/vl/vlDAT.cpp in Visualization Library 2009.08.812 allow user-assisted remote attackers to execute arbitrary CVE-2010-09959.3Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted F CVE-2010-09966.0Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php CVE-2010-09973.5Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the Content Management plugin in e107 before 0.7.20, CVE-2010-099810.0Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vec CVE-2010-09997.1Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via direct CVE-2010-10005.8Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory trav CVE-2010-100015.5A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Par CVE-2010-100026.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affec CVE-2010-100039.8A vulnerability classified as critical was found in gesellix titlelink on Joomla. Affected by this vulnerability is an unknown functionality CVE-2010-100046.1A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown proces