Description
Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter.
References
- 63167 vdb-entry
- 20100324 Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability mailing-list
- http://secunia.com/secunia_research/2010-48/
- 38947 vdb-entry
- 39011 third-party-advisory