PT-2010-3567 · Openmairie · Openmairie Openregistrecil
Cr4Wl3R
·
Publicado
2010-05-18
·
Atualizado
2010-05-19
·
CVE-2010-1946
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
openMairie Openregistrecil version 1.02
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
path om parameter to various PHP files, including autorisation normale.class.php, collectivite.class.php, dossier.class.php, norme simplifiee.class.php, registre.class.php, autorisation unique.class.php, demande avis.class.php, droit.class.php, organisme.class.php, service.class.php, categorie donnee.class.php, destinataire.class.php, profil.class.php, tabdyn visu.class.php, categorie personne.class.php, dispense.class.php, modificatif.class.php, reference.class.php, and utilisateur.class.php in the obj/ directory. This can occur when register globals is enabled.Recommendations
For openMairie Openregistrecil version 1.02, consider disabling the
register globals setting to prevent exploitation. Additionally, restrict access to the vulnerable PHP files in the obj/ directory until a patch is available. Avoid using the path om parameter in the affected API endpoints until the issue is resolved.Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openmairie Openregistrecil