CVE-2010-4612: Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled,...

Security readout for executives and security teams

CVE-2010-4612 is a set of SQL injection flaws in Hycus CMS 1.0.3. If exposed and configured with magic_quotes_gpc disabled, attackers may manipulate database queries through several public-facing form and search parameters. The source bundle does not name a vendor patch or confirm active exploitation. Exposure is most likely limited to legacy Hycus CMS 1.0.3 sites still reachable over the internet, especially unmaintained PHP deployments with magic_quotes_gpc disabled. Modern environments may be unaffected if Hycus CMS is absent or retired. Prioritize if Hycus CMS 1.0.3 is internet-facing or still connected to sensitive data. The issue is old, but SQL injection can affect confidentiality and integrity. If the product is not present, no action beyond documentation is needed. Mitigation focus: Inventory and retire any Hycus CMS 1.0.3 deployments.; Check original vendor or maintainer guidance for fixed versions or supported remediation.; Restrict public access to affected Hycus CMS paths where possible..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.