CWE-98
1,295 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
CVEs (1,295)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Local File Inclusion in Mission <= 1.22 versions. |
Unauthenticated Local File Inclusion in Abelle <= 1.22 versions. |
Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions. |
Unauthenticated Local File Inclusion in Wanium <= 1.9.8 versions. |
Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions. |
Unauthenticated Local File Inclusion in Especio <= 1.0 versions. |
Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions. |
Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions. |
Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions. |
Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions. |
Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions. |
Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions. |
Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions. |
Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions. |
Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions. |
Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions. |
Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions. |
Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions. |
Unauthenticated Local File Inclusion in Learnify <= 1.15.0 versions. |
Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions. |