CVE-2010-3419: Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allo...

Security readout for executives and security teams

This is an old remote file inclusion flaw in Family Connections CMS 2.2.3. A remote attacker could make affected pages load attacker-controlled PHP, which may lead to server-side code execution. Treat any exposed legacy FCMS instance as urgent to identify and contain. Exposure is likely limited to organizations still running Haudenschilt Family Connections CMS 2.2.3, especially if familynews.php or settings.php are internet-accessible. The affected product metadata is incomplete, so asset discovery should rely on application inventory, file paths, and version evidence. Prioritize discovery and containment if FCMS exists in the environment. The business risk is server compromise through a legacy web application, but urgency depends on whether any vulnerable instance is reachable. Mitigation focus: Identify any FCMS 2.2.3 deployments and affected PHP pages.; Restrict internet access to legacy FCMS until remediation is confirmed.; Check vendor or project guidance for an official fixed version or workaround..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.