CVE-2010-4810: Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote...

Security readout for executives and security teams

CVE-2010-4810 describes a legacy web application flaw in AR Web Content Manager 2.1 final. Remote attackers could make the application include attacker-controlled PHP files, which can lead to arbitrary PHP code execution on the server. The source bundle does not provide CVSS, vendor patch details, or evidence of active exploitation. Exposure is likely limited to organizations still running AR Web Content Manager 2.1 final, especially if the affected PHP files are reachable from the internet. The provided affected-product metadata is incomplete, so asset validation is required rather than assuming broad exposure. Treat confirmed internet-facing AWCM 2.1 final systems as urgent legacy-risk remediation. The business concern is server compromise through remote code execution, but urgency depends on whether the obsolete application is still deployed and reachable. Mitigation focus: Identify any AWCM 2.1 final deployments and owners.; Check vendor or maintainer guidance for fixed versions or patches.; Remove, replace, or isolate unsupported AWCM deployments..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.