CVE-2010-4330

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to index.php.

• pulsecms pulse cms (<= 1.2.8) • pulsecms pulse cms 1.0 • pulsecms pulse cms 1.01 • pulsecms pulse cms 1.1 • pulsecms pulse cms 1.2 • pulsecms pulse cms 1.2.1 • pulsecms pulse cms 1.2.2 • pulsecms pulse cms 1.2.3 • pulsecms pulse cms 1.2.4 • pulsecms pulse cms 1.2.5 • pulsecms pulse cms 1.2.6 • pulsecms pulse cms 1.2.7 • pulsecms pulse cms 1.15 • pulsecms pulse cms 1.16 • pulsecms pulse cms 1.17 • pulsecms pulse cms 1.18