CWE-98
1,269 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
CVEs (1,269)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Motors allows PHP Local File Inclusion. This issue affects Motors: from n/a through...Show more |
Unauthenticated Local File Inclusion in Atomlab <= 2.4.5 versions. |
Unauthenticated Local File Inclusion in Uppercase < 1.2.2 versions. |
Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions. |
Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions. |
Unauthenticated Local File Inclusion in Etude <= 1.6 versions. |
Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions. |
Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions. |
Unauthenticated Local File Inclusion in Skyward <= 1.10 versions. |
Unauthenticated Local File Inclusion in Granola <= 1.13 versions. |
Unauthenticated Local File Inclusion in Gamic <= 1.15 versions. |
Unauthenticated Local File Inclusion in Preservation <= 1.10 versions. |
Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions. |
Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions. |
Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions. |
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions. |
Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions. |
Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions. |
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions. |
Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions. |