CWE-98
1,295 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
CVEs (1,295)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions. |
Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions. |
Unauthenticated Local File Inclusion in ITactics <= 1.0 versions. |
Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions. |
Unauthenticated Local File Inclusion in Resurs <= 1.3 versions. |
Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions. |
Unauthenticated Local File Inclusion in Spike <= 1.2 versions. |
Unauthenticated Local File Inclusion in Eros <= 1.3 versions. |
Unauthenticated Local File Inclusion in Choreo <= 1.6 versions. |
Unauthenticated Local File Inclusion in WineShop <= 3.17 versions. |
Unauthenticated Local File Inclusion in Grecko <= 5.17 versions. |
Unauthenticated Local File Inclusion in Snowy <= 1.13 versions. |
Unauthenticated Local File Inclusion in Gita <= 1.11 versions. |
Unauthenticated Local File Inclusion in Printo <= 1.11 versions. |
Unauthenticated Local File Inclusion in Medeus <= 1.14 versions. |
Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions. |
Unauthenticated Local File Inclusion in Quirky <= 1.23 versions. |
Unauthenticated Local File Inclusion in Putter <= 1.17 versions. |
Unauthenticated Local File Inclusion in Dom <= 1.24 versions. |
Unauthenticated Local File Inclusion in Gat <= 1.16 versions. |