CVE-2010-1945: Code Injection
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to (1) action.class.php, (2) architecte.class.php, (3) avis.class.php, (4) bible.class.php, and (5) blocnote.class.php in obj/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1945?
The severity of CVE-2010-1945 is rated as medium with a score of 6.8.
How do I fix CVE-2010-1945?
To fix CVE-2010-1945, disable register_globals and ensure proper input validation and sanitization in your PHP application.
What software is affected by CVE-2010-1945?
The vulnerability CVE-2010-1945 affects openMairie Openfoncier version 2.00.
What types of attacks are possible with CVE-2010-1945?
CVE-2010-1945 allows remote attackers to execute arbitrary PHP code through multiple PHP remote file inclusion vulnerabilities.
How can I mitigate the risks associated with CVE-2010-1945?
Mitigation strategies for CVE-2010-1945 include disabling register_globals, applying updates to the software, and implementing strict access controls.