CVE-2010-1945: Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is...

Security readout for executives and security teams

Openfoncier 2.00 can let an attacker run PHP code from a remote location if PHP register_globals is enabled. That can become server compromise, but the evidence bundle does not name a patch or show active exploitation. Exposure is likely limited to legacy Openfoncier 2.00 deployments running old PHP configurations with register_globals enabled. Internet-facing installations are the main concern. The structured affected data is incomplete, so validate by application version and configuration. Prioritize as high if Openfoncier 2.00 is internet-facing or still runs legacy PHP settings. The business risk is remote code execution, but urgency depends on confirming the uncommon register_globals prerequisite. Mitigation focus: Identify any Openfoncier 2.00 deployments and owners.; Disable PHP register_globals where still enabled.; Restrict public access until vendor guidance is confirmed..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.