CVE-2010-3480

CVE-2010-3480 describes a directory traversal vulnerability in ApPHP PHP MicroCMS 1.0.1, specifically within the index.php file when the magic_quotes_gpc setting is disabled. This flaw allows unauthenticated remote attackers to include and execute arbitrary local files by manipulating the 'page' parameter with dot-dot-slash sequences. With a CVSS score of 6.8, this vulnerability is of medium severity, indicating that an attacker can achieve partial confidentiality, integrity, and availability impact with moderate attack complexity. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-15011) exists, suggesting proof-of-concept code is publicly available, though community discussion and media coverage are minimal.