CVE-2006-5517: Rhode Island Secretary Of State Open Meetings Filing System

High severity, CVSS 7.5. EPSS: 14.7% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) editmeetings/session.php, (2) email/session.php, (3) entityproperties/session.php, or (4) inc/mail.php.

Affected products

• Rhode Island Secretary Of State Open Meetings Filing System: any version

Published 2006-10-26. Last modified 2026-06-16.