CVE-2010-1337

Published: Apr 9, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allow remote attackers to execute arbitrary PHP code via a URL in the (1) include and (2) Configuration['LANGUAGE'] parameters.

Affected (18)

Products: Lussumo: Vanilla

Lussumo

1 product

Vanilla

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Lussumo Vanilla	Up to 1.1.10
Lussumo Vanilla	Version 0.9.2
Lussumo Vanilla	Version 1.0.1
Lussumo Vanilla	Version 1.0.2
Lussumo Vanilla	Version 1.0.3
Lussumo Vanilla	Version 1.1.1
Lussumo Vanilla	Version 1.1.2
Lussumo Vanilla	Version 1.1.3
Lussumo Vanilla	Version 1.1.4
Lussumo Vanilla	Version 1.1.5
Lussumo Vanilla	Version 1.1.5 a
Lussumo Vanilla	Version 1.1.5 rc1
Lussumo Vanilla	Version 1.1.6
Lussumo Vanilla	Version 1.1.6 rc2
Lussumo Vanilla	Version 1.1.7
Lussumo Vanilla	Version 1.1.8
Lussumo Vanilla	Version 1.1.9
Lussumo Vanilla	Version 1.1