CVE-2010-3419

2010-09-1621:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%

JSON

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the current_user_id parameter to (1) familynews.php and (2) settings.php.

References

packetstormsecurity.org/1009-exploits/fcms-rfi.txt

www.exploit-db.com/exploits/14965

exchange.xforce.ibmcloud.com/vulnerabilities/61722