CVE-2010-1266: Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attac...

Security readout for executives and security teams

CVE-2010-1266 affects WebMaid CMS 0.2-6 Beta and earlier. Several PHP files can be tricked into including attacker-controlled remote content, which may allow arbitrary PHP code execution on the server. The sources show public exploit references, but do not show CISA KEV listing or confirmed active exploitation. Exposure is likely limited to organizations still running WebMaid CMS 0.2-6 Beta or earlier, especially if the affected template PHP files are internet-accessible. This is an old and likely uncommon CMS, so inventory confirmation matters more than broad assumptions. Treat as urgent if WebMaid CMS is present and exposed. The business risk is server compromise from a legacy web application flaw. If the CMS is not present, no action is needed beyond documenting the inventory result. Mitigation focus: Identify any WebMaid CMS deployments and their versions.; Check vendor or maintainer guidance for a fixed release or replacement.; Remove or isolate WebMaid CMS 0.2-6 Beta or earlier from public access..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.