CVE-2010-0989

Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter.

Date published : 2010-03-26

http://www.securityfocus.com/bid/38947

http://www.securityfocus.com/archive/1/510307/100/0/threaded