CVE-2010-1342

CVE-2010-1342 describes multiple remote file inclusion vulnerabilities in Direct News 4.10.2, specifically when the register_globals PHP setting is enabled. Attackers can exploit this by injecting a malicious URL into the rootpath or adminroot parameters of various PHP files, leading to arbitrary PHP code execution. The vulnerability has a CVSS score of 6.8 (Medium), indicating a network-based attack with medium complexity and potential for partial compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is high at 85/100, despite a low EPSS score. While there is no evidence of active exploitation or Metasploit modules, an exploit is publicly available on ExploitDB. The CVE has garnered minimal community discussion and media coverage, suggesting limited public awareness or attention.