CVE-2006-5407

HIGH · CVSS 7.5 EPSS 1.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-10-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-5407

Severity

HIGH

CVSS

7.5

EPSS

1.43%

Original NVD Description

PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter.