CVE-2010-1944
- State
- Published
- Severity
- Not scored
- Published
- May 18, 2010
- Updated
- Aug 7, 2024
- Reserved
- May 18, 2010
Description
Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation.class.php, (2) courrierautorisation.class.php, (3) droit.class.php, (4) profil.class.php, (5) temp_defunt_sansemplacement.class.php, (6) utils.class.php, (7) cimetiere.class.php, (8) defunt.class.php, (9) emplacement.class.php, (10) tab_emplacement.class.php, (11) temp_emplacement.class.php, (12) voie.class.php, (13) collectivite.class.php, (14) defunttransfert.class.php, (15) entreprise.class.php, (16) temp_autorisation.class.php, (17) travaux.class.php, (18) zone.class.php, (19) courrier.class.php, (20) dossier.class.php, (21) plans.class.php, (22) temp_defunt.class.php, and (23) utilisateur.class.php in obj/.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 64238vdb-entry
- 64231vdb-entry
- 64223vdb-entry
- 64237vdb-entry
- 64228vdb-entry
- 64230vdb-entry
- 64244vdb-entry
- opencimetiere-pathom-file-include(58267)vdb-entry
- 64239vdb-entry
- 64225vdb-entry
- 12476exploit
- 64227vdb-entry
- http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt
- 39883vdb-entry
- 64245vdb-entry
- 64242vdb-entry
- 64234vdb-entry
- 64232vdb-entry
- 39687third-party-advisory
- 64229vdb-entry
- 64235vdb-entry
- 64233vdb-entry
- 64241vdb-entry
- 64240vdb-entry
- 64236vdb-entry
- ADV-2010-1050vdb-entry
- 64226vdb-entry
- 64243vdb-entry
- 64224vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.