CVE-2010-1921
OpenMairie openAnnuaire 2.00 - Remote File Inclusion via path_om Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1921. PoCs published by cr4wl3r.
AI-analyzed exploit summary This exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openannuaire Openmairie Annuaire 2.00. It provides multiple endpoints where an attacker can include remote or local files by manipulating the 'path_om' or 'dsn[phptype]' parameters.
Description
Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) annuaire.class.php, (2) droit.class.php, (3) collectivite.class.php, (4) profil.class.php, (5) direction.class.php, (6) service.class.php, (7) directiongenerale.class.php, and (8) utilisateur.class.php in obj/.
Exploits (1)
This exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openannuaire Openmairie Annuaire 2.00. It provides multiple endpoints where an attacker can include remote or local files by manipulating the 'path_om' or 'dsn[phptype]' parameters.