CVE-2010-2137: Giaard Proman

High severity, CVSS 7.5. EPSS: 5.9% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

Affected products

• Giaard Proman: up to and including 0.1.1; version 0.1.0 only

Published 2010-06-02. Last modified 2026-06-16.