CVE-2010-1934
openMairie openPlanning 1.00 - Remote Code Execution via path_om Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1934. PoCs published by cr4wl3r.
AI-analyzed exploit summary This exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openplanning 1.00. It provides URLs to exploit the vulnerabilities by injecting malicious paths into the 'path_om' and 'dsn[phptype]' parameters.
Description
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) categorie.class.php, (2) profil.class.php, (3) collectivite.class.php, (4) ressource.class.php, (5) droit.class.php, (6) utilisateur.class.php, and (7) planning.class.php in obj/.
Exploits (1)
This exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openplanning 1.00. It provides URLs to exploit the vulnerabilities by injecting malicious paths into the 'path_om' and 'dsn[phptype]' parameters.