CVE-2010-2358: PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_...

Security readout for executives and security teams

This is an old Nakid CMS 0.5.2 issue that can let a remote attacker run PHP code if the site uses unsafe legacy PHP settings. Business urgency depends on whether any internet-facing Nakid CMS instance still exists. Exposure is likely limited to legacy Nakid CMS 0.5.2 deployments, especially internet-facing PHP sites retaining register_globals and the affected catalog upload module. Treat as high priority only if Nakid CMS is present. If confirmed, prioritize containment or retirement because successful exploitation could mean server-side code execution. Mitigation focus: Inventory for Nakid CMS 0.5.2 and the affected upload_photo.php file.; Disable register_globals wherever legacy PHP still permits it.; Restrict public access to the affected module if it is not required..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.