CWE-98
1,295 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
CVEs (1,295)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions. |
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions. |
Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions. |
Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions. |
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions. |
Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions. |
Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions. |
Unauthenticated Local File Inclusion in Malmö <= 2.2 versions. |
Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions. |
Unauthenticated Local File Inclusion in Getaway < 1.8 versions. |
Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions. |
Unauthenticated Local File Inclusion in Solene <= 3.4 versions. |
Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions. |
Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions. |
Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions. |
Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions. |
Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions. |
Unauthenticated Local File Inclusion in Right Way <= 4.0 versions. |
Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions. |
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions. |