high7.5Public exploit code
CVE-2010-1467
Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitrary PHP code via a URL in the path_om par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Openurgence vaccin 1.03 - Local File Inclusion / Remote File Inclusion2010-04-13 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) collectivite.class.php, (2) injection.class.php, (3) utilisateur.class.php, (4) droit.class.php, (5) laboratoire.class.php, (6) vaccin.class.php, (7) effetsecondaire.class.php, (8) medecin.class.php, (9) individu.class.php, and (10) profil.class.php in gen/obj/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Francois Raynaud | Openurgence Vaccin | Version 1.03 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/39400
- http://www.exploit-db.com/exploits/12193
- http://www.securityfocus.com/bid/39412
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57815
- http://secunia.com/advisories/39400
- http://www.exploit-db.com/exploits/12193
- http://www.securityfocus.com/bid/39412
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57815