CVE-2010-1920 in openAnnuaire
Summary
by MITRE
Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 10/20/2025
The vulnerability described in CVE-2010-1920 represents a critical directory traversal flaw within the OpenMairie openAnnuaire 2.00 web application. This security weakness specifically affects the scr/soustab.php script and becomes exploitable when the PHP configuration parameter register_globals is enabled. The vulnerability stems from insufficient input validation and sanitization of user-supplied data, creating a pathway for remote attackers to manipulate file inclusion mechanisms. The attack vector targets the dsn[phptype] parameter, which is processed without adequate security controls to prevent malicious directory traversal sequences from being executed.
The technical implementation of this vulnerability aligns with CWE-22, which categorizes directory traversal attacks as a fundamental weakness in input validation. When register_globals is enabled, PHP automatically creates global variables from HTTP request data, eliminating the need for explicit variable assignment. This configuration creates a dangerous environment where attacker-controlled data can directly influence the application's execution flow. The flaw allows adversaries to craft malicious URLs containing directory traversal sequences such as ../ or ..\ that can navigate outside the intended directory structure and access arbitrary local files on the server.
Operationally, this vulnerability presents a severe threat to system security as it enables remote code execution capabilities through local file inclusion attacks. Attackers can leverage this weakness to execute arbitrary code on the target system, potentially leading to complete system compromise. The impact extends beyond simple file access, as successful exploitation could allow attackers to read sensitive configuration files, access database credentials, or deploy malicious payloads. The related vulnerability CVE-2007-2069 indicates that this class of attack has been previously documented and understood, making the exploitation techniques well-known within the security community. The vulnerability affects not just the immediate application but also potentially compromises the entire server infrastructure due to the elevated privileges that may be available through the application's execution context.
Mitigation strategies for CVE-2010-1920 should focus on multiple defensive layers including immediate patching of the affected OpenMairie openAnnuaire application to the latest secure version. System administrators must disable the register_globals PHP configuration parameter to eliminate the primary attack vector that enables this vulnerability. Input validation and sanitization should be implemented at all points where user-supplied data is processed, particularly for parameters like dsn[phptype]. Additionally, implementing proper file access controls and restricting file inclusion to predefined whitelists can prevent unauthorized file access. Network-level defenses including web application firewalls and intrusion detection systems should be configured to monitor for suspicious directory traversal patterns and malformed requests. Organizations should also conduct comprehensive security assessments to identify similar vulnerabilities in other applications and ensure proper security hardening of PHP configurations to prevent future incidents of this nature. The ATT&CK framework categorizes this vulnerability under T1059 for command and scripting interpreter and T1566 for credential access, highlighting the comprehensive threat landscape that such directory traversal vulnerabilities create for enterprise security environments.