CVE-2010-4931: PHP-Fusion

High severity, CVSS 10.0. EPSS: 15.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder_level parameter. NOTE: this issue has been disputed by a reliable third party

Affected products

• PHP-Fusion PHP-Fusion: affected versions not specified

Published 2011-10-09. Last modified 2026-06-16.