CVE-2010-1944

Exp

Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation.class.php, (2) courrierautorisation.class.php, (3) droit.class.php, (4) profil.class.php, (5) temp_defunt_sansemplacement.class.php, (6) utils.class.php, (7) cimetiere.class.php, (8) defunt.class.php, (9) emplacement.class.php, (10) tab_emplacement.class.php, (11) temp_emplacement.class.php, (12) voie.class.php, (13) collectivite.class.php, (14) defunttransfert.class.php, (15) entreprise.class.php, (16) temp_autorisation.class.php, (17) travaux.class.php, (18) zone.class.php, (19) courrier.class.php, (20) dossier.class.php, (21) plans.class.php, (22) temp_defunt.class.php, and (23) utilisateur.class.php in obj/.

Published: 2010-05-19 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2010-1944 is rated High Exploit Risk (73.4/100): CVSS Medium severity, with high exploitation likelihood (EPSS 5.83%, 92th percentile). 4 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2010-1944

EDB-ID Source Kind Published Link
12476 exploit_db edb 2010-05-01 Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2010-1944

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 6.91% 5.83% -1.08%
2 2025-09-15 6.36% 6.91% +0.55%
3 2025-03-30 — 6.36% —

Full EPSS history (9 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2010-1944

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
6.8 2.0 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 8.6 6.4 [email protected]

Weakness enumeration for CVE-2010-1944

Affected software / configurations for CVE-2010-1944

Vendor Product Version Raw CPE
openmairie opencimetiere 2.01 cpe:2.3:a:openmairie:opencimetiere:2.01:*:*:*:*:*:*:*

References for CVE-2010-1944

URL Tags
http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt Exploit
http://secunia.com/advisories/39687 Vendor Advisory
http://www.exploit-db.com/exploits/12476 Exploit
http://www.osvdb.org/64223
http://www.osvdb.org/64224
http://www.osvdb.org/64225
http://www.osvdb.org/64226
http://www.osvdb.org/64227
http://www.osvdb.org/64228
http://www.osvdb.org/64229
http://www.osvdb.org/64230
http://www.osvdb.org/64231
http://www.osvdb.org/64232
http://www.osvdb.org/64233
http://www.osvdb.org/64234
http://www.osvdb.org/64235
http://www.osvdb.org/64236
http://www.osvdb.org/64237
http://www.osvdb.org/64238
http://www.osvdb.org/64239
http://www.osvdb.org/64240
http://www.osvdb.org/64241
http://www.osvdb.org/64242
http://www.osvdb.org/64243
http://www.osvdb.org/64244
http://www.osvdb.org/64245
http://www.securityfocus.com/bid/39883 Exploit
http://www.vupen.com/english/advisories/2010/1050 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58267
cvelogic Threat Intelligence