CVE-2010-0989

Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter.

• pulsecms pulse cms (<= 1.2.2) • pulsecms pulse cms 1.0 • pulsecms pulse cms 1.1 • pulsecms pulse cms 1.01 • pulsecms pulse cms 1.2 • pulsecms pulse cms 1.2.1 • pulsecms pulse cms 1.15 • pulsecms pulse cms 1.16 • pulsecms pulse cms 1.17 • pulsecms pulse cms 1.18