CVE-2010-2850: Nusoftware Nubuilder

Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dir parameter.

Affected products

• Nusoftware Nubuilder: up to and including 10.04.20; version 09.06.10 only; version 09.06.26 only; version 09.07.24 only; version 09.08.20 only; version 09.09.23 only

Published 2010-07-25. Last modified 2026-06-16.