CVE-2010-4998

PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained from third party information.

• CWE-94

• http://packetstormsecurity.org/1006-exploits/ardeacore-rfi.txtExploit
• http://secunia.com/advisories/40207Vendor Advisory
• http://securityreason.com/securityalert/8503
• http://www.exploit-db.com/exploits/13832/Exploit
• http://www.securityfocus.com/bid/40811Exploit
• http://www.vupen.com/english/advisories/2010/1444Vendor Advisory
• http://packetstormsecurity.org/1006-exploits/ardeacore-rfi.txtExploit
• http://secunia.com/advisories/40207Vendor Advisory
• http://securityreason.com/securityalert/8503
• http://www.exploit-db.com/exploits/13832/Exploit
• http://www.securityfocus.com/bid/40811Exploit
• http://www.vupen.com/english/advisories/2010/1444Vendor Advisory

Published

Nov 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4992SQL injection vulnerability in the Payments Plus component 2…
• CVE-2010-4993SQL injection vulnerability in the eventcal (com_eventcal) c…
• CVE-2010-4994SQL injection vulnerability in the Jobs Pro component 1.6.4 …
• CVE-2010-4995SQL injection vulnerability in the NeoRecruit (com_neorecrui…
• CVE-2010-4996SQL injection vulnerability in ogp_show.php in esoftpro Onli…
• CVE-2010-4997SQL injection vulnerability in index.php in OlyKit Swoopo Cl…
• CVE-2010-4999SQL injection vulnerability in index.php in esoftpro Online …
• CVE-2010-5000SQL injection vulnerability in login/login_index.php in MCLo…
• CVE-2010-5001SQL injection vulnerability in view.php in esoftpro Online C…
• CVE-2010-5002Cross-site scripting (XSS) vulnerability in modules/slidesho…
• CVE-2010-5003SQL injection vulnerability in the AutarTimonial (com_autart…
• CVE-2010-5004SQL injection vulnerability in searchvote.php in 2daybiz Pol…