CVE-2006-1149

PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attackers to include…

published March 10, 2006

CVSS

—

EPSS

10%

Percentile

95.6

In the wild

Unconfirmed

What it is

PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the xrms_file_root parameter, which is not initialized before use.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.09993 · 95.6th percentile
Published: 2006-03-10T11:00Z

EPSS history

Timeline

10 MAR 11:00Z
PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attackers to include…
cvelistv5