CVE-2010-4988: PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who...

Security readout for executives and security teams

CVE-2010-4988 is a remote file inclusion issue in Family Connections Who is Chatting 2.2.3. If the vulnerable PHP file is reachable, an attacker could cause the server to run attacker-controlled PHP code. No CVSS score or official fix is provided in the bundle. Exposure is likely limited to internet-facing or internally reachable deployments of Family Connections Who is Chatting 2.2.3 where the affected mod_chatting theme file is present and executable by PHP. Treat as high priority only where the vulnerable legacy component is present and reachable. The business risk is server compromise through remote code execution, but urgency depends on confirmed asset exposure. Mitigation focus: Inventory any Family Connections Who is Chatting deployments and identify version 2.2.3.; Check vendor or project guidance for a supported fixed release or advisory.; Remove or disable the vulnerable component if it is no longer required..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.