Unscored CVE-2006-5407 EUVD-2006-5392GHSA-62fx-wcm7-cwr3

PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the…

Published Oct 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter.

References

1745 third-party-advisory
20061014 WDT:- osTicket File Include all V mailing-list
osticket-openform-file-include(29577) vdb-entry