CVE-2010-0967

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to (1) colorvoid/footer.php, (2) default-green/footer.php, (3) default-orange/footer.php, and (4) default/footer.php in themes/. NOTE: some of these details are obtained from third party information.

• CWE-22

• http://osvdb.org/62915
• http://osvdb.org/62916
• http://osvdb.org/62917
• http://osvdb.org/62918
• http://secunia.com/advisories/38949Vendor Advisory
• http://www.exploit-db.com/exploits/11721Exploit
• http://www.vupen.com/english/advisories/2010/0612Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56857
• http://osvdb.org/62915
• http://osvdb.org/62916
• http://osvdb.org/62917
• http://osvdb.org/62918
• http://secunia.com/advisories/38949Vendor Advisory
• http://www.exploit-db.com/exploits/11721Exploit
• http://www.vupen.com/english/advisories/2010/0612Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56857

Published

Mar 16, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0961Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX …
• CVE-2010-0962The FTP proxy server in Apple AirPort Express, AirPort Extre…
• CVE-2010-0963Cross-site scripting (XSS) vulnerability in index.php in dl …
• CVE-2010-0964SQL injection vulnerability in start.php in Eros Webkatalog …
• CVE-2010-0965Jevci Siparis Formu Scripti stores sensitive information und…
• CVE-2010-0966PHP remote file inclusion vulnerability in inc/config.php in…
• CVE-2010-0968SQL injection vulnerability in bannershow.php in Geekhelps A…
• CVE-2010-0969Unbound before 1.4.3 does not properly align structures on 6…
• CVE-2010-0970SQL injection vulnerability in phpmylogon.php in PhpMyLogon …
• CVE-2010-0971Multiple cross-site scripting (XSS) vulnerabilities in ATuto…
• CVE-2010-0972Directory traversal vulnerability in the GCalendar (com_gcal…
• CVE-2010-0973SQL injection vulnerability in index.php in phppool media Do…