CVE-2010-0983: PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register...

Security readout for executives and security teams

This is an old Rezervi web application flaw that can let an outside attacker run PHP code on the server if a risky PHP setting is enabled. It matters most for forgotten legacy sites, because compromise could expose the web server and application data. Exposure is most likely on internet-facing legacy Rezervi deployments at version 3.0.2 or earlier, especially old PHP environments where register_globals remains enabled. Treat this as high priority if Rezervi is still internet-accessible. The technology and PHP setting are legacy, so the main business risk is unmanaged exposure from forgotten systems rather than a current mainstream platform issue. Mitigation focus: Inventory and retire any Rezervi 3.0.2 or earlier deployments.; Disable PHP register_globals where still present.; Check vendor or maintainer guidance for supported fixed versions..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.