CVE-2010-1528

Uiga Proxy - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ITSecTeam · htmlwebappsphp

https://www.exploit-db.com/exploits/12049

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://secunia.com/advisories/39313

[Exploit] http://www.exploit-db.com/exploits/12049

[Third Party Advisory, VDB Entry] http://www.osvdb.org/63528

[Exploit] http://www.securityfocus.com/bid/39365

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/57515

Scores

EPSS 0.0078

EPSS Percentile 73.8%

Details

CWE

CWE-94

Status published

Products (1)

uiga/proxy

Published Apr 26, 2010

Tracked Since Feb 18, 2026