CVE-2010-3480: Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabl...

Security readout for executives and security teams

CVE-2010-3480 affects ApPHP PHP MicroCMS 1.0.1. If a site runs this old CMS with magic_quotes_gpc disabled, a remote attacker may manipulate the page parameter to include and execute local files. That can expose sensitive files or turn existing local files into code execution paths. Exposure is most likely on internet-facing legacy PHP sites still running ApPHP PHP MicroCMS 1.0.1. The condition depends on magic_quotes_gpc being disabled. The bundle does not identify broader products, hosted services, or package names. Treat confirmed exposed instances as urgent legacy risk. The product is old, the flaw can reach local file execution, and public exploit material is referenced. Prioritize inventory, containment, and replacement over extended tuning. Mitigation focus: Inventory public sites for ApPHP PHP MicroCMS 1.0.1.; Check vendor or trusted advisories for a fixed version or migration guidance.; Restrict public access to affected instances until remediation is confirmed..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.