CVE-2010-1061: Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled,...

Security readout for executives and security teams

CVE-2010-1061 describes a legacy PHP short-link application flaw that could let a remote attacker make the application load local files. The public record says this affects Phpkobo Short URL 1.01 when magic_quotes_gpc is disabled, but also notes the provenance is unknown. Exposure is likely limited to legacy Phpkobo Short URL 1.01 deployments, especially internet-facing PHP installations using the named files and historical PHP settings. The affected product metadata is incomplete in the CVE record, so asset confirmation is required. Prioritize discovery over emergency response. If this software is still exposed, reduce risk quickly because the reported impact is code execution through local file inclusion, but public evidence is incomplete and no active exploitation is cited. Mitigation focus: Inventory any Phpkobo Short URL deployments and confirm whether version 1.01 is present.; Check PHP configuration for magic_quotes_gpc on legacy hosts running this application.; Review original vendor or archived advisory guidance before changing production systems..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.