CVE-2010-0988

CVE-2010-0988 describes multiple vulnerabilities in Pulse CMS prior to version 1.2.3. These flaws allow remote attackers to write to arbitrary files and execute arbitrary PHP code, either through improper handling of login failures in includes/login.php or, for authenticated users, via manipulated filename and block parameters in view.php. The vulnerability has a CVSS score of 6.0, indicating a medium severity. It can be exploited remotely with medium attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting low public awareness and attention.