Phpkobo · Phpkobo Free Real Estate Contact Form · CVE-2010-1062
**Name of the Vulnerable Software and Affected Versions**
Phpkobo Free Real Estate Contact Form version 1.09
**Description**
The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the `LANG CODE` parameter when `magic quotes gpc` is disabled.
**Recommendations**
For Phpkobo Free Real Estate Contact Form version 1.09, consider disabling the `LANG CODE` parameter or restricting its use until a patch is available. Additionally, enabling `magic quotes gpc` may help mitigate the risk of exploitation.