CVE-2010-1926: Openmairie Opencourrier

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. NOTE: some of these details are obtained from third party information.

Affected products

• Openmairie Opencourrier: version 2.02 only; version 2.03 only

Published 2010-05-12. Last modified 2026-06-16.