Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2010-3206

Published: 03/09/2010 Updated: 17/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Diy-cms

Vulnerability Summary

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote malicious users to execute arbitrary PHP code via a URL in the (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions.php.

Vulnerable Product Search on Vulmon Subscribe to Product

diy-cms diy-cms 1.0

Exploits

Exploit DB: DIY-CMS 1.0 - Multiple Remote File Inclusions
# Exploit Title: [DiY-CMS 10 Remote File Inclusion ] # Date: [28-8-2010] # Author: LoStHaCkEr  ~  aDaM_TRoJaN # Software Link: [webscriptssoftpediacom/scriptDownload/DiY-CMS-Download-63258html] # Version: [v 10 ] # Tested on: [Windows XP] # CVE : Hacker town of Musayyib #Contact: LoStHaCkEr[at]yahoo[dot]com ~0r~ aDaM_TRoJaN@yah ...

References

CWE-94http://packetstormsecurity.org/1008-exploits/diycms-rfi.txthttp://www.exploit-db.com/exploits/14822https://exchange.xforce.ibmcloud.com/vulnerabilities/61454https://nvd.nist.govhttps://www.exploit-db.com/exploits/14822/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook