CVE:CVE-2010-1934
CNNVD:CNNVD-201005-185
openMairie openPlanning存在多个PHP远程文件包含漏洞，当register_globals开启时，远程攻击者可通过脚本(1) categorie.class.php、 (2) profil.class.php、 (3) collectivite.class.php、 (4) ressource.class.php、(5) droit.class.php、 (6) utilisateur.class.php和(7) planning.class.php in obj/的path_om参数的URL执行任意PHP代码。
solution:Upgrade openmairie openplanning to a higher version than 1.00,and avoid the version 1.00