CVE-2010-1946: Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_global...

Security readout for executives and security teams

Openregistrecil 1.02 can let a remote attacker run PHP code if the old PHP register_globals setting is enabled. For any internet-facing legacy instance, this is a serious server compromise risk. The bundle does not identify a vendor patch or current active exploitation. Exposure is likely limited to legacy Openregistrecil 1.02 deployments, especially internet-facing PHP installations with register_globals enabled. Modern PHP versions removed register_globals, reducing likelihood unless the application remains on very old infrastructure. Prioritize quickly if Openregistrecil 1.02 is still deployed. The business risk is full server compromise on legacy exposed systems, but urgency depends on confirmed presence and configuration. Mitigation focus: Identify and retire or isolate Openregistrecil 1.02 deployments.; Disable PHP register_globals wherever present.; Restrict public access to affected Openregistrecil instances..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.