CVE-2010-1999

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.

• CWE-22

• http://packetstormsecurity.org/1005-exploits/opencatalogue-lfi.txtExploit
• http://secunia.com/advisories/39688Vendor Advisory
• http://www.exploit-db.com/exploits/12475Exploit
• http://www.osvdb.org/64183
• http://www.vupen.com/english/advisories/2010/1051Vendor Advisory
• http://packetstormsecurity.org/1005-exploits/opencatalogue-lfi.txtExploit
• http://secunia.com/advisories/39688Vendor Advisory
• http://www.exploit-db.com/exploits/12475Exploit
• http://www.osvdb.org/64183
• http://www.vupen.com/english/advisories/2010/1051Vendor Advisory

Published

May 20, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1993Opera 9.52 does not properly handle an IFRAME element with a…
• CVE-2010-1994SQL injection vulnerability in index.php in TomatoCMS before…
• CVE-2010-1995Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2010-1996Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2010-1997Cross-site scripting (XSS) vulnerability in admin/edit.php i…
• CVE-2010-1998Cross-site scripting (XSS) vulnerability in the CCK TableFie…
• CVE-2010-2000Cross-site scripting (XSS) vulnerability in the Bibliography…
• CVE-2010-20007Seagull FTP Client <= v3.3 Build 409 contains a stack-based …8.5
• CVE-2010-2001Cross-site scripting (XSS) vulnerability in the CiviRegister…
• CVE-2010-20010Foxit PDF Reader before 4.2.0.0928 does not properly bound-c…8.4
• CVE-2010-2002Cross-site scripting (XSS) vulnerability in the Wordfilter m…
• CVE-2010-2003Cross-site scripting (XSS) vulnerability in misc/get_admin.p…