CVE-2010-1082

CVE-2010-1082 describes multiple directory traversal vulnerabilities in OI.Blogs 1.0.0, specifically when the magic_quotes_gpc setting is disabled. This flaw allows remote attackers to read arbitrary files by injecting directory traversal sequences into the 'theme' parameter of loadStyles.php or the 'scripts' parameter of javascript/loadScripts.php. The vulnerability carries a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and primarily impacting confidentiality by allowing unauthorized information disclosure. There is no impact on integrity or availability. There is no evidence of active exploitation, nor are there any known public exploit modules (e.g., Metasploit, Nuclei, ExploitDB). Community discussion and media coverage for this CVE are extremely low, suggesting minimal attention or impact.