Vulnerability Details CVE-2010-1934
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) categorie.class.php, (2) profil.class.php, (3) collectivite.class.php, (4) ressource.class.php, (5) droit.class.php, (6) utilisateur.class.php, and (7) planning.class.php in obj/.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.047
EPSS Ranking 88.9%
CVSS Severity
CVSS v2 Score 6.8
References
- http://packetstormsecurity.org/1004-exploits/openplanning-rfilfi.txt
- http://secunia.com/advisories/39606
- http://www.exploit-db.com/exploits/12365
- http://www.osvdb.org/64186
- http://www.osvdb.org/64187
- http://www.osvdb.org/64188
- http://www.osvdb.org/64189
- http://www.osvdb.org/64191
- http://www.osvdb.org/64192
- http://packetstormsecurity.org/1004-exploits/openplanning-rfilfi.txt
- http://secunia.com/advisories/39606
- http://www.exploit-db.com/exploits/12365
- http://www.osvdb.org/64186
- http://www.osvdb.org/64187
- http://www.osvdb.org/64188
- http://www.osvdb.org/64189
- http://www.osvdb.org/64191
- http://www.osvdb.org/64192
Products affected by CVE-2010-1934
-
cpe:2.3:a:openmairie:openplanning:1.00