CVE-2010-2096

CVE-2010-2096 describes a directory traversal vulnerability in CMSQlite 1.2 and earlier, allowing remote attackers to include and execute arbitrary local files. This is achieved by manipulating the 'mod' parameter in index.php with a dot-dot (..) sequence. The vulnerability carries a CVSS score of 7.5, indicating high severity with network-based exploitation, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.