Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-5546. PoCs published by GregStar.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in OTSCMS versions 1.0.0 to 2.1.3. The vulnerability arises from insecure handling of user-supplied input in the `GLOBALS` array, allowing an attacker to include arbitrary remote PHP files.
Description
PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][otscms][directories][classes] parameter.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in OTSCMS versions 1.0.0 to 2.1.3. The vulnerability arises from insecure handling of user-supplied input in the `GLOBALS` array, allowing an attacker to include arbitrary remote PHP files.