CVE-2010-1922: 29o3 CMS

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in 29o3 CMS 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the LibDir parameter to (1) lib/page/pageDescriptionObject.php, and (2) layoutHeaderFuncs.php, (3) layoutManager.php, and (4) layoutParser.php in lib/layout/.

Affected products

• 29o3 CMS 29o3 CMS: version 0.1 only

Published 2010-05-12. Last modified 2026-06-16.