Linker · Linker Img · CVE-2010-2456
**Name of the Vulnerable Software and Affected Versions**
Linker IMG versions 1.0 and earlier
**Description**
The issue allows remote attackers to read and execute arbitrary local files. This can be achieved via a URL in the `cook lan` cookie parameter, which is associated with the `$lan dir` variable, or possibly the `Sdb type` parameter.
**Recommendations**
For versions 1.0 and earlier, consider restricting access to the `index.php` file until a fix is available. As a temporary workaround, avoid using the `cook lan` cookie parameter and the `Sdb type` parameter in the affected URL.