Unrated severityNVD Advisory· Published Feb 22, 2010· Updated Jun 16, 2026

CVE-2010-0678

Description

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includes_directory parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Katalog.hurricane/Katalog Stron Hurricane
cpe:2.3:a:katalog.hurricane:katalog_stron_hurricane:1.3.5:*:*:*:*:*:*:*
Katalog Stron/Hurricanellm-fuzzy
Range: <=1.3.5

Patches

Vulnerability mechanics

References

packetstormsecurity.org/1002-exploits/katalog-rfisql.txtnvdExploit
www.exploit-db.com/exploits/11452nvdExploit
secunia.com/advisories/38581nvdVendor Advisory
osvdb.org/62340nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000