VULNERABILITY INTELLIGENCE

CVE-2006-5546

CVSS score5.1 MEDIUM

EPSS probability3.19%

CISA KEVNot currently listed

Published2006-10-26

Last modified2026-06-16

Description

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][otscms][directories][classes] parameter.