CVE-2010-4943: Brothersoft Saurus CMS

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the class_path parameter to (1) file.php or (2) com_del.php.

Affected products

• Brothersoft Saurus CMS: version 4.7.0 only

Published 2011-10-09. Last modified 2026-06-16.