Security Advisory

CVE-2010-1945

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-05-18 18:00:00

Last updated 2024-08-07 02:17:13

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) action.class.php, (2) architecte.class.php, (3) avis.class.php, (4) bible.class.php, and (5) blocnote.class.php in obj/.

← Browse all CVEs View on cve.org ↗