CVE-2010-1921

MEDIUM 6.8CVE-2010-1921 · Published 12/05/2010 · updated 16/06/2026

In short

CVE-2010-1921 is a MEDIUM (CVSS 6.8) vulnerability affecting openannuaire (openmairie).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openannuaire openmairie	`= 2.00`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) annuaire.class.php, (2) droit.class.php, (3) collectivite.class.php, (4) profil.class.php, (5) direction.class.php, (6) service.class.php, (7) directiongenerale.class.php, and (8) utilisateur.class.php in obj/.

References

packetstormsecurity.org/1005-exploits/openmairie-rfilfi.txt · Exploit
secunia.com/advisories/39673 · Vendor Advisory
exploit-db.com/exploits/12486 · Exploit
osvdb.org/64176
osvdb.org/64177
osvdb.org/64178
osvdb.org/64179
osvdb.org/64180
osvdb.org/64181
osvdb.org/64182
osvdb.org/64184
securityfocus.com/bid/39887 · Exploit
vupen.com/english/advisories/2010/1059 · Vendor Advisory

More vulnerabilities in openannuaire

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free