Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2010-0992

EPSS 0.14% · P34
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2010-0992

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete image files, or (3) create blocks.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Pulse CMS 'view.php'页面跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Pulse是一个Web应用程序开发框架和门户网站搭建解决方案。 Pulse CMS存在多个跨站请求伪造漏洞。由于没有执行充分的有效性检查便允许用户通过HTTP请求执行某些操作，如果已登录用户访问了恶意网站就会允许远程攻击者劫持用户的认证，代表该用户执行上传图形或删除文件或创建块等请求。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2010-0992

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-0992

Please Login to view more intelligence information

Same Patch Batch · n/a · 2010-04-09 · 18 CVEs total

CVE-2010-1343Bjsintay SiteX 'photo.php' SQL注入漏洞
CVE-2010-1334Pulse CMS Basic 未限制文件上传漏洞
CVE-2010-1333Almas Inc. Compiere J300_A0 多个跨站脚本攻击漏洞
CVE-2010-1332PrettyBook PrettyFormMail 跨站脚本攻击漏洞
CVE-2010-1331Heartlogic HL-SiteManager SQL注入漏洞
CVE-2010-0993Pulse CMS 无限制文件上传漏洞
CVE-2010-1346RibaFS 'admin/login.php' SQL注入漏洞
CVE-2010-1345Cookex Agency CKForms组件目录遍历漏洞
CVE-2010-1344Cookex CKForms组件SQL注入漏洞
CVE-2010-1335Miftahovn Insky CMS 多个PHP远程文件包含漏洞
CVE-2010-1342Direct News多个PHP远程文件包含漏洞
CVE-2010-1341Systemsoftware Community Black Forum 'index.php' SQL注入漏洞
CVE-2010-1340Joomla! J!Research (com_jresearch)组件'jresearch.php'目录遍历漏洞
CVE-2010-1339Robertotto Teamsite Hack 'ts_other.php' 跨站脚本攻击漏洞
CVE-2010-1338Robertotto Woltlab Burning Board Teamsite Hack Plugin 'userid'参数SQL注入漏洞
CVE-2010-1337Lussumo Vanilla 'definitions.php'PHP多个远程文件包含漏洞
CVE-2010-1336INVOhost 多个SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2010-0992

No comments yet

Leave a comment