NVD

Id
13435  
Name
CVE-2010-1944  
Description
Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation.class.php, (2) courrierautorisation.class.php, (3) droit.class.php, (4) profil.class.php, (5) temp_defunt_sansemplacement.class.php, (6) utils.class.php, (7) cimetiere.class.php, (8) defunt.class.php, (9) emplacement.class.php, (10) tab_emplacement.class.php, (11) temp_emplacement.class.php, (12) voie.class.php, (13) collectivite.class.php, (14) defunttransfert.class.php, (15) entreprise.class.php, (16) temp_autorisation.class.php, (17) travaux.class.php, (18) zone.class.php, (19) courrier.class.php, (20) dossier.class.php, (21) plans.class.php, (22) temp_defunt.class.php, and (23) utilisateur.class.php in obj/.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-05-19  
Modified Date
2010-05-19  
Seq
2010-1944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74316 13435 CVE-2010-1944 http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt  View
74317 13435 CVE-2010-1944 12476  View
74318 13435 CVE-2010-1944 39883  View
74319 13435 CVE-2010-1944 ADV-2010-1050  View
74320 13435 CVE-2010-1944 opencimetiere-pathom-file-include(58267)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38992 JVNDB-2010-004777 openMairie openCimetiere における PHP リモートファイルインクルージョンの脆弱性 openMairie openCimetiere には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2010-1944 44524 CVE-2010-1944 13435 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004777.html 2010-05-19 2012-09-25 View