CVE-2010-1927
openMairie openCourrier 2.02-2.03 beta - Remote Code Execution via path_om Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1927. PoCs published by cr4wl3r.
AI-analyzed exploit summary This exploit demonstrates multiple RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Opencourrier 2.03beta. The PoC provides URLs that can be manipulated to include arbitrary files, potentially leading to remote code execution or sensitive information disclosure.
Description
Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) bible.class.php, (2) dossier.class.php, (3) service.class.php, (4) collectivite.class.php, (5) droit.class.php, (6) tache.class.php, (7) emetteur.class.php, (8) utilisateur.class.php, (9) courrier.recherche.tab.class.php, and (10) profil.class.php in obj/. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates multiple RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Opencourrier 2.03beta. The PoC provides URLs that can be manipulated to include arbitrary files, potentially leading to remote code execution or sensitive information disclosure.