CVE-2010-2456

CVE-2010-2456 describes multiple directory traversal vulnerabilities in Linker IMG version 1.0 and earlier. Attackers can exploit these flaws by manipulating the 'cook_lan' cookie or potentially the 'Sdb_type' parameter to read and execute arbitrary local files. This vulnerability carries a CVSS score of 6.8, indicating a medium severity with network access, medium attack complexity, and partial impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit for remote file inclusion (EDB-13964) exists, though the original report suggests directory traversal as the primary vector. There is no evidence of active exploitation, and it has received minimal community discussion or media coverage.