CVE-2010-2146

CVE-2010-2146 describes a remote file inclusion vulnerability in the banned.php component of Graviton-Mediatech Visitor Logger, allowing remote attackers to execute arbitrary PHP code by manipulating the VL_include_path parameter. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its low attack complexity, requiring no authentication, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.