CVE-2010-1266

CVE-2010-1266 describes multiple remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier versions. Attackers can exploit these flaws by injecting malicious PHP code via various parameters in specific template files, leading to arbitrary code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not actively exploited in the wild or listed in CISA KEV, public exploit code is available on ExploitDB, and there is minimal community discussion or media coverage surrounding this decade-old vulnerability.