CVE-2006-1149: PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globa...

Security readout for executives and security teams

CVE-2006-1149 is an old remote file inclusion issue in OWL Intranet Engine 0.82. If the vulnerable PHP configuration is enabled, an attacker may be able to make the application load attacker-controlled remote content. This can create serious server compromise risk for legacy exposed deployments. Exposure is most likely limited to legacy OWL Intranet Engine 0.82 deployments running PHP with register_globals enabled, especially if the OWL application is internet-facing or reachable by untrusted users. Treat this as urgent only if OWL Intranet Engine 0.82 is still deployed. The technology and PHP setting are legacy, but exposed vulnerable systems could face high-impact compromise risk. Mitigation focus: Disable PHP register_globals wherever possible.; Check vendor or trusted advisory guidance for fixed OWL versions.; Remove or isolate OWL Intranet Engine 0.82 if still deployed..

Prepared

Jun 29, 2026, 13:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.