CVE-2010-3204: Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arb...

Security readout for executives and security teams

Pecio CMS 2.0.5 has multiple remote file inclusion flaws that may let a remote attacker make the site load attacker-controlled PHP through the template parameter. If reachable on the internet, this can become server-side code execution. The source bundle does not identify a patched version or current active exploitation. Exposure appears limited to Pecio CMS 2.0.5 installations using the nova-blue template paths and reachable affected PHP files. The bundle does not provide CPEs, supported versions, prevalence, or vendor patch status. Treat internet-facing instances as urgent because the reported impact is arbitrary PHP execution. Priority drops if the product is not present or is fully isolated. The main business task is confirming whether this legacy CMS exists anywhere. Mitigation focus: Inventory any Pecio CMS 2.0.5 deployments and affected nova-blue template files.; Check vendor or maintainer guidance for fixed versions or safe upgrade paths.; If no supported fix exists, retire, replace, or isolate the application..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.