CVE-2010-1945
openMairie Openfoncier 2.00 - Remote File Inclusion via path_om Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1945. PoCs published by cr4wl3r.
AI-analyzed exploit summary The exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openfoncier 2.00. It provides specific URLs with injectable parameters to include remote or local files, enabling arbitrary code execution or sensitive file disclosure.
Description
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) action.class.php, (2) architecte.class.php, (3) avis.class.php, (4) bible.class.php, and (5) blocnote.class.php in obj/.
Exploits (1)
The exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openfoncier 2.00. It provides specific URLs with injectable parameters to include remote or local files, enabling arbitrary code execution or sensitive file disclosure.