CVE-2010-2143

CVE-2010-2143 describes a directory traversal vulnerability in Symphony CMS version 2.0.7, specifically within the index.php file. An unauthenticated remote attacker can exploit this by injecting a dot-dot sequence into the 'mode' parameter, allowing them to read arbitrary files on the server and potentially cause further unspecified impact. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, leading to potential compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, public exploit code exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this older vulnerability.