{"id": "CVE-2010-1935", "vendorId": null, "type": "cve", "bulletinFamily": "NVD", "title": "CVE-2010-1935", "description": "Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.", "published": "2010-05-12T16:07:00", "modified": "2017-08-17T01:32:00", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cvss2": {"cvssV2": {"version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 6.8}, "severity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "cvss3": {}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1935", "reporter": "cve@mitre.org", "references": ["http://www.osvdb.org/64194", "http://www.exploit-db.com/exploits/12364", "http://packetstormsecurity.org/1004-exploits/openpresse-lfi.txt", "http://secunia.com/advisories/39605", "https://exchange.xforce.ibmcloud.com/vulnerabilities/58090"], "cvelist": ["CVE-2007-2069", "CVE-2010-1935"], "immutableFields": [], "lastseen": "2022-03-23T12:03:15", "viewCount": 12, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-2069", "CVE-2010-1920", "CVE-2010-1926", "CVE-2010-1928", "CVE-2010-1936", "CVE-2010-1947", "CVE-2010-1948", "CVE-2010-1999"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310800783", "OPENVAS:800783"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:7602"]}]}, "score": {"value": 5.2, "vector": "NONE"}, "backreferences": {"references": [{"type": "cve", "idList": ["CVE-2007-2069"]}, {"type": "openvas", "idList": ["OPENVAS:800783", "OPENVAS:861619"]}]}, "exploitation": null, "vulnersScore": 5.2}, "_state": {"dependencies": 0, "score": 0}, "_internal": {}, "cna_cvss": {"cna": null, "cvss": {}}, "cpe": ["cpe:/a:openmairie:openpresse:1.01"], "cpe23": ["cpe:2.3:a:openmairie:openpresse:1.01:*:*:*:*:*:*:*"], "cwe": ["CWE-22"], "affectedSoftware": [{"cpeName": "openmairie:openpresse", "version": "1.01", "operator": "eq", "name": "openmairie openpresse"}], "affectedConfiguration": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"operator": "OR", "children": [], "cpe_match": [{"vulnerable": true, "cpe23Uri": "cpe:2.3:a:openmairie:openpresse:1.01:*:*:*:*:*:*:*", "cpe_name": []}]}]}, "extraReferences": [{"url": "http://www.osvdb.org/64194", "name": "64194", "refsource": "OSVDB", "tags": []}, {"url": "http://www.exploit-db.com/exploits/12364", "name": "12364", "refsource": "EXPLOIT-DB", "tags": ["Exploit"]}, {"url": "http://packetstormsecurity.org/1004-exploits/openpresse-lfi.txt", "name": "http://packetstormsecurity.org/1004-exploits/openpresse-lfi.txt", "refsource": "MISC", "tags": ["Exploit"]}, {"url": "http://secunia.com/advisories/39605", "name": "39605", "refsource": "SECUNIA", "tags": ["Vendor Advisory"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58090", "name": "openpresse-soustab-file-include(58090)", "refsource": "XF", "tags": []}]}

{"openvas": [{"lastseen": "2017-07-02T21:10:04", "description": "This host is running openMairie openPresse and is prone to\nlocal file inclusion vulnerability.", "cvss3": {}, "published": "2010-05-25T00:00:00", "type": "openvas", "title": "openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2010-1935"], "modified": "2017-02-17T00:00:00", "id": "OPENVAS:800783", "href": "http://plugins.openvas.org/nasl.php?oid=800783", "sourceData": "##############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_openmairie_openpresse_lfi_vuln.nasl 5323 2017-02-17 08:49:23Z teissa $\n#\n# openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability\n#\n# Authors:\n# Madhuri D <dmadhuri@secpod.com>\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ntag_impact = \"Successful exploitation will allow remote attackers to obtain\nsensitive information or execute arbitrary code on the vulnerable Web server.\n\nImpact Level: Application.\";\n\ntag_affected = \"OpenMairie OpenPresse version 1.01 and prior\";\n\ntag_insight = \"Input passed to the parameter 'dsn[phptype]' in 'scr/soustab.php'\nis not properly verified before being used to include files.\";\n\ntag_solution = \"No solution or patch was made available for at least one year\nsince disclosure of this vulnerability. Likely none will be provided anymore.\nGeneral solution options are to upgrade to a newer release, disable respective\nfeatures, remove the product or replace the product by another one.\";\n\ntag_summary = \"This host is running openMairie openPresse and is prone to\nlocal file inclusion vulnerability.\";\n\nif(description)\n{\n script_id(800783);\n script_version(\"$Revision: 5323 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-02-17 09:49:23 +0100 (Fri, 17 Feb 2017) $\");\n script_tag(name:\"creation_date\", value:\"2010-05-25 13:56:16 +0200 (Tue, 25 May 2010)\");\n script_cve_id(\"CVE-2010-1935\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_name(\"openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability\");\n script_xref(name : \"URL\" , value : \"http://secunia.com/advisories/39605\");\n script_xref(name : \"URL\" , value : \"http://xforce.iss.net/xforce/xfdb/58090\");\n script_xref(name : \"URL\" , value : \"http://www.exploit-db.com/exploits/12364\");\n\n script_tag(name:\"qod_type\", value:\"remote_vul\");\n script_category(ACT_ATTACK);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Web application abuses\");\n script_dependencies(\"gb_openmairie_prdts_detect.nasl\");\n script_require_ports(\"Services/www\", 80);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name : \"impact\" , value : tag_impact);\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name:\"solution_type\", value:\"WillNotFix\");\n exit(0);\n}\n\n\ninclude(\"http_func.inc\");\n\nopenPort = get_http_port(default:80);\nif(!get_port_state(openPort)){\n exit(0);\n}\n\n## Get openPresse version from KB\nopenVer = get_kb_item(\"www/\"+ openPort + \"/OpenMairie/Open_Presse\");\nif(!openVer){\n exit(0);\n}\n\nopenVer = eregmatch(pattern:\"^(.+) under (/.*)$\", string:openVer);\n\nif(openVer[2] != NULL)\n{\n ## Check for the Exploit\n sndReq = http_get(item:string(openVer[2], \"/scr/soustab.php?dsn[phptype]=\" +\n \"../../../../../../../../OpenVas-rfi.txt\"),port:openPort);\n rcvRes = http_send_recv(port:openPort, data:sndReq);\n\n ## Check the attack response\n if(\"/OpenVas-rfi.txt/\" >< rcvRes && \"failed to open stream\" >< rcvRes){\n security_message(openPort);\n }\n}\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2020-05-12T17:33:14", "description": "This host is running openMairie openPresse and is prone to\n local file inclusion vulnerability.", "cvss3": {}, "published": "2010-05-25T00:00:00", "type": "openvas", "title": "openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2010-1935"], "modified": "2020-05-08T00:00:00", "id": "OPENVAS:1361412562310800783", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310800783", "sourceData": "##############################################################################\n# OpenVAS Vulnerability Test\n#\n# openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability\n#\n# Authors:\n# Madhuri D <dmadhuri@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.800783\");\n script_version(\"2020-05-08T08:34:44+0000\");\n script_tag(name:\"last_modification\", value:\"2020-05-08 08:34:44 +0000 (Fri, 08 May 2020)\");\n script_tag(name:\"creation_date\", value:\"2010-05-25 13:56:16 +0200 (Tue, 25 May 2010)\");\n script_cve_id(\"CVE-2010-1935\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n script_name(\"openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability\");\n script_xref(name:\"URL\", value:\"http://secunia.com/advisories/39605\");\n script_xref(name:\"URL\", value:\"http://xforce.iss.net/xforce/xfdb/58090\");\n script_xref(name:\"URL\", value:\"http://www.exploit-db.com/exploits/12364\");\n\n script_tag(name:\"qod_type\", value:\"remote_vul\");\n script_category(ACT_ATTACK);\n script_copyright(\"Copyright (C) 2010 Greenbone Networks GmbH\");\n script_family(\"Web application abuses\");\n script_dependencies(\"gb_openmairie_prdts_detect.nasl\");\n script_require_ports(\"Services/www\", 80);\n script_mandatory_keys(\"openmairie/products/detected\");\n\n script_tag(name:\"insight\", value:\"Input passed to the parameter 'dsn[phptype]' in 'scr/soustab.php'\n is not properly verified before being used to include files.\");\n\n script_tag(name:\"solution\", value:\"No known solution was made available for at least one year since the disclosure\n of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer\n release, disable respective features, remove the product or replace the product by another one.\");\n\n script_tag(name:\"summary\", value:\"This host is running openMairie openPresse and is prone to\n local file inclusion vulnerability.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote attackers to obtain\n sensitive information or execute arbitrary code on the vulnerable Web server.\");\n\n script_tag(name:\"affected\", value:\"OpenMairie OpenPresse version 1.01 and prior.\");\n\n script_tag(name:\"solution_type\", value:\"WillNotFix\");\n\n exit(0);\n}\n\ninclude(\"http_func.inc\");\n\nopenPort = http_get_port(default:80);\n\nopenVer = get_kb_item(\"www/\"+ openPort + \"/OpenMairie/Open_Presse\");\nif(!openVer)\n exit(0);\n\nopenVer = eregmatch(pattern:\"^(.+) under (/.*)$\", string:openVer);\n\nif(openVer[2] != NULL)\n{\n url = string(openVer[2], \"/scr/soustab.php?dsn[phptype]=../../../../../../../../vt-rfi.txt\");\n sndReq = http_get(item:url, port:openPort);\n rcvRes = http_send_recv(port:openPort, data:sndReq);\n\n if(\"/vt-rfi.txt/\" >< rcvRes && \"failed to open stream\" >< rcvRes) {\n report = http_report_vuln_url(port:openPort, url:url);\n security_message(port:openPort, data:report);\n exit(0);\n }\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "cve": [{"lastseen": "2022-03-23T12:07:03", "description": "Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dsn[phptype] parameter.", "cvss3": {}, "published": "2007-04-18T03:19:00", "type": "cve", "title": "CVE-2007-2069", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069"], "modified": "2017-10-11T01:32:00", "cpe": ["cpe:/a:openmairie:openmairie:1.11"], "id": "CVE-2007-2069", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2069", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:openmairie:1.11:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:02:58", "description": "Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.", "cvss3": {}, "published": "2010-05-12T16:07:00", "type": "cve", "title": "CVE-2010-1920", "cwe": ["CWE-22"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069", "CVE-2010-1920"], "modified": "2010-05-13T04:00:00", "cpe": ["cpe:/a:openmairie:openannuaire:2.00"], "id": "CVE-2010-1920", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1920", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:openannuaire:2.00:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:04:28", "description": "Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.", "cvss3": {}, "published": "2010-05-20T17:30:00", "type": "cve", "title": "CVE-2010-1999", "cwe": ["CWE-22"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069", "CVE-2010-1999"], "modified": "2010-05-21T04:00:00", "cpe": ["cpe:/a:openmairie:opencatalogue:1.024"], "id": "CVE-2010-1999", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1999", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:opencatalogue:1.024:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:03:16", "description": "Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.", "cvss3": {}, "published": "2010-05-12T16:07:00", "type": "cve", "title": "CVE-2010-1936", "cwe": ["CWE-22"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069", "CVE-2010-1936"], "modified": "2017-08-17T01:32:00", "cpe": ["cpe:/a:openmairie:opencominterne:1.01"], "id": "CVE-2010-1936", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1936", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:opencominterne:1.01:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:03:04", "description": "Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. NOTE: some of these details are obtained from third party information.", "cvss3": {}, "published": "2010-05-12T16:07:00", "type": "cve", "title": "CVE-2010-1926", "cwe": ["CWE-22"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069", "CVE-2010-1926"], "modified": "2010-05-13T04:00:00", "cpe": ["cpe:/a:openmairie:opencourrier:2.02", "cpe:/a:openmairie:opencourrier:2.03"], "id": "CVE-2010-1926", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1926", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:opencourrier:2.02:*:*:*:*:*:*:*", "cpe:2.3:a:openmairie:opencourrier:2.03:beta:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:03:06", "description": "Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.", "cvss3": {}, "published": "2010-05-12T16:07:00", "type": "cve", "title": "CVE-2010-1928", "cwe": ["CWE-22"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069", "CVE-2010-1928"], "modified": "2017-08-17T01:32:00", "cpe": ["cpe:/a:openmairie:openplanning:1.00"], "id": "CVE-2010-1928", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1928", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:openplanning:1.00:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:03:29", "description": "Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter. NOTE: this may be related to CVE-2007-2069.", "cvss3": {}, "published": "2010-05-19T12:07:00", "type": "cve", "title": "CVE-2010-1947", "cwe": ["CWE-22"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069", "CVE-2010-1947"], "modified": "2010-05-19T12:07:00", "cpe": ["cpe:/a:openmairie:openregistrecil:1.02"], "id": "CVE-2010-1947", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1947", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:openregistrecil:1.02:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:03:30", "description": "Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.", "cvss3": {}, "published": "2010-05-19T12:07:00", "type": "cve", "title": "CVE-2010-1948", "cwe": ["CWE-22"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-2069", "CVE-2010-1948"], "modified": "2010-05-19T12:07:00", "cpe": ["cpe:/a:openmairie:openfoncier:2.00"], "id": "CVE-2010-1948", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1948", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:openmairie:openfoncier:2.00:*:*:*:*:*:*:*"]}], "securityvulns": [{"lastseen": "2021-06-08T18:44:58", "description": "PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.", "edition": 2, "cvss3": {}, "published": "2007-04-19T00:00:00", "title": "Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;", "type": "securityvulns", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2007-2042", "CVE-2007-2070", "CVE-2007-1976", "CVE-2007-2068", "CVE-2007-2043", "CVE-2007-2047", "CVE-2007-2066", "CVE-2007-2009", "CVE-2007-2049", "CVE-2007-2079", "CVE-2007-2050", "CVE-2007-2046", "CVE-2007-2071", "CVE-2007-2067", "CVE-2007-2044", "CVE-2007-2080", "CVE-2007-2069"], "modified": "2007-04-19T00:00:00", "id": "SECURITYVULNS:VULN:7602", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:7602", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}