CVEvulnerability
CVE-2010-1360
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP code via a URL in the path_faqe parameter to (1) attachs.php, (2) backup.php, (3) badwords.php, (4) categories.php, (5) changepw.php, (6) colorchooser.php, (7) colorwheel.php, (8) dbfiles.php, (9) diraccess.php, (10) faq.php, (11) index.php, (12) kb.php, and (13) stats.php.
Affected configurations
• boesch-it faqengine 4.24.00
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://packetstormsecurity.org/1001-exploits/faqengine-rfi.txt Exploit
- http://www.exploit-db.com/exploits/11111 Exploit
- http://www.securityfocus.com/bid/37719 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55532 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1001-exploits/faqengine-rfi.txt Exploit
- http://www.exploit-db.com/exploits/11111 Exploit
- http://www.securityfocus.com/bid/37719 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55532 exchange.xforce.ibmcloud.com