PT-2010-3567 · Openmairie · Openmairie Openregistrecil
Cr4Wl3R
·
Published
2010-05-18
·
Updated
2010-05-19
·
CVE-2010-1946
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
openMairie Openregistrecil version 1.02
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
path om parameter to various PHP files, including autorisation normale.class.php, collectivite.class.php, dossier.class.php, norme simplifiee.class.php, registre.class.php, autorisation unique.class.php, demande avis.class.php, droit.class.php, organisme.class.php, service.class.php, categorie donnee.class.php, destinataire.class.php, profil.class.php, tabdyn visu.class.php, categorie personne.class.php, dispense.class.php, modificatif.class.php, reference.class.php, and utilisateur.class.php in the obj/ directory. This can occur when register globals is enabled.Recommendations
For openMairie Openregistrecil version 1.02, consider disabling the
register globals setting to prevent exploitation. Additionally, restrict access to the vulnerable PHP files in the obj/ directory until a patch is available. Avoid using the path om parameter in the affected API endpoints until the issue is resolved.Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openmairie Openregistrecil