CVE:CVE-2010-1921
CNNVD:CNNVD-201005-177
OpenMairie openAnnuaire存在多个PHP远程文件包含漏洞，当register_globals开启时，远程攻击者可通过(1) annuaire.class.php、 (2) droit.class.php、 (3) collectivite.class.php、 (4) profil.class.php、 (5) direction.class.php、 (6) service.class.php、 (7) directiongenerale.class.php 和(8) utilisateur.class.php in obj/ path_om参数的URL执行任意PHP代码。
solution:Upgrade openmairie openannuaire to a higher version than 2.00,and avoid the version 2.00