Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Priority LOW 37

Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequence…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0416 Published 2010-05-18 No fix listed CWE-22
Priority LOW 39

Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autori…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05832 Published 2010-05-18 No fix listed CWE-94
Priority LOW 34

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01955 Published 2010-05-12 No fix listed CWE-22
Priority LOW 35

Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) categor…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02901 Published 2010-05-12 No fix listed CWE-94
Priority LOW 34

Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory tra…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01973 Published 2010-05-12 No fix listed CWE-22
Priority LOW 36

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) annuair…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03224 Published 2010-05-12 No fix listed CWE-94