CVE-2010-1360: Code Injection
Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP code via a URL in the pathfaqe parameter to (1) attachs.php, (2) backup.php, (3) badwords.php, (4) categories.php, (5) changepw.php, (6) colorchooser.php, (7) colorwheel.php, (8) dbfiles.php, (9) diraccess.php, (10) faq.php, (11) index.php, (12) kb.php, and (13) stats.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1360?
CVE-2010-1360 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2010-1360?
To fix CVE-2010-1360, update FAQEngine to a version that is not vulnerable, or implement access controls to restrict file inclusion.
Which versions of FAQEngine are affected by CVE-2010-1360?
CVE-2010-1360 specifically affects FAQEngine version 4.24.00.
What type of attacks can be performed using CVE-2010-1360?
CVE-2010-1360 allows attackers to execute arbitrary PHP code on the server, leading to potential data theft or server compromise.
Is CVE-2010-1360 related to remote file inclusion vulnerabilities?
Yes, CVE-2010-1360 involves multiple PHP remote file inclusion vulnerabilities that can be exploited by attackers.