CVE-2010-2456: Codelib Linker Img

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitrary local files via a URL in the (1) cook_lan cookie parameter ($lan_dir variable) or possibly (2) Sdb_type parameter. NOTE: this was originally reported as remote file inclusion, but this may be inaccurate.

Affected products

• Codelib Linker Img: up to and including 1.0

Published 2010-06-25. Last modified 2026-06-16.