CVE-2010-1946

Published: May 19, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation_normale.class.php, (2) collectivite.class.php, (3) dossier.class.php, (4) norme_simplifiee.class.php, (5) registre.class.php, (6) autorisation_unique.class.php, (7) demande_avis.class.php, (8) droit.class.php, (9) organisme.class.php, (10) service.class.php, (11) categorie_donnee.class.php, (12) destinataire.class.php, (13) profil.class.php, (14) tabdyn_visu.class.php, (15) categorie_personne.class.php, (16) dispense.class.php, (17) modificatif.class.php, (18) reference.class.php, and (19) utilisateur.class.php in obj/.

Affected (1)

Products: Openmairie: Openregistrecil

1 product

Openregistrecil

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openmairie Openregistrecil	Version 1.02

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (46)

http://packetstormsecurity.org/1004-exploits/openregistrecil-rfilfi.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/39534

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/12313

Source: cve@mitre.org

Exploit

http://www.osvdb.org/63945

Source: cve@mitre.org

http://www.osvdb.org/63946

Source: cve@mitre.org

http://www.osvdb.org/63947

Source: cve@mitre.org

http://www.osvdb.org/63948

Source: cve@mitre.org

http://www.osvdb.org/63949

Source: cve@mitre.org

http://www.osvdb.org/63950

Source: cve@mitre.org

http://www.osvdb.org/63951

Source: cve@mitre.org

http://www.osvdb.org/63952

Source: cve@mitre.org

http://www.osvdb.org/63953

Source: cve@mitre.org

http://www.osvdb.org/63954

Source: cve@mitre.org

http://www.osvdb.org/63955

Source: cve@mitre.org

http://www.osvdb.org/63956

Source: cve@mitre.org

http://www.osvdb.org/63957

Source: cve@mitre.org

http://www.osvdb.org/63958

Source: cve@mitre.org

http://www.osvdb.org/63959

Source: cve@mitre.org

http://www.osvdb.org/63960

Source: cve@mitre.org

http://www.osvdb.org/63961

Source: cve@mitre.org

http://www.osvdb.org/63962

Source: cve@mitre.org

http://www.osvdb.org/63963

Source: cve@mitre.org

http://www.securityfocus.com/bid/39611

Source: cve@mitre.org

Exploit

http://packetstormsecurity.org/1004-exploits/openregistrecil-rfilfi.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/39534

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/12313

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/63945

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63946

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63947

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63948

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63949

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63950

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63951

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63952

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63953

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63954

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63955

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63956

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63957

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63958

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63959

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63960

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63961

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63962

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/63963

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/39611

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.