Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2010-1944 Details

Description

Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation.class.php, (2) courrierautorisation.class.php, (3) droit.class.php, (4) profil.class.php, (5) temp_defunt_sansemplacement.class.php, (6) utils.class.php, (7) cimetiere.class.php, (8) defunt.class.php, (9) emplacement.class.php, (10) tab_emplacement.class.php, (11) temp_emplacement.class.php, (12) voie.class.php, (13) collectivite.class.php, (14) defunttransfert.class.php, (15) entreprise.class.php, (16) temp_autorisation.class.php, (17) travaux.class.php, (18) zone.class.php, (19) courrier.class.php, (20) dossier.class.php, (21) plans.class.php, (22) temp_defunt.class.php, and (23) utilisateur.class.php in obj/.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt	CVE	Exploit
http://secunia.com/advisories/39687	CVE	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58267	CVE
http://www.exploit-db.com/exploits/12476	CVE	Exploit
http://www.osvdb.org/64223	CVE
http://www.osvdb.org/64224	CVE
http://www.osvdb.org/64225	CVE
http://www.osvdb.org/64226	CVE
http://www.osvdb.org/64227	CVE
http://www.osvdb.org/64228	CVE
http://www.osvdb.org/64229	CVE
http://www.osvdb.org/64230	CVE
http://www.osvdb.org/64231	CVE
http://www.osvdb.org/64232	CVE
http://www.osvdb.org/64233	CVE
http://www.osvdb.org/64234	CVE
http://www.osvdb.org/64235	CVE
http://www.osvdb.org/64236	CVE
http://www.osvdb.org/64237	CVE
http://www.osvdb.org/64238	CVE
http://www.osvdb.org/64239	CVE
http://www.osvdb.org/64240	CVE
http://www.osvdb.org/64241	CVE
http://www.osvdb.org/64242	CVE
http://www.osvdb.org/64243	CVE
http://www.osvdb.org/64244	CVE
http://www.osvdb.org/64245	CVE
http://www.securityfocus.com/bid/39883	CVE	Exploit
http://www.vupen.com/english/advisories/2010/1050	CVE	Vendor Advisory
http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt	[email protected]	Exploit
http://secunia.com/advisories/39687	[email protected]	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58267	[email protected]
http://www.exploit-db.com/exploits/12476	[email protected]	Exploit
http://www.osvdb.org/64223	[email protected]
http://www.osvdb.org/64224	[email protected]
http://www.osvdb.org/64225	[email protected]
http://www.osvdb.org/64226	[email protected]
http://www.osvdb.org/64227	[email protected]
http://www.osvdb.org/64228	[email protected]
http://www.osvdb.org/64229	[email protected]
http://www.osvdb.org/64230	[email protected]
http://www.osvdb.org/64231	[email protected]
http://www.osvdb.org/64232	[email protected]
http://www.osvdb.org/64233	[email protected]
http://www.osvdb.org/64234	[email protected]
http://www.osvdb.org/64235	[email protected]
http://www.osvdb.org/64236	[email protected]
http://www.osvdb.org/64237	[email protected]
http://www.osvdb.org/64238	[email protected]
http://www.osvdb.org/64239	[email protected]
http://www.osvdb.org/64240	[email protected]
http://www.osvdb.org/64241	[email protected]
http://www.osvdb.org/64242	[email protected]
http://www.osvdb.org/64243	[email protected]
http://www.osvdb.org/64244	[email protected]
http://www.osvdb.org/64245	[email protected]
http://www.securityfocus.com/bid/39883	[email protected]	Exploit
http://www.vupen.com/english/advisories/2010/1050	[email protected]	Vendor Advisory

see all 58 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-94	Improper Control of Generation of Code ('Code Injection')	[email protected]

Affected Products

Product	Versions
openmairie opencimetiere	2.01
CPE cpe:2.3:a:openmairie:opencimetiere:2.01:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 17, 2017	CVE Modified	[email protected]
May 19, 2010	Initial Analysis	[email protected]