漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-17081 iziContents <= RC6 (RFI/LFI) Multiple Remote Vulnerabilities
SSV-7293 phpBB Plus <= 1.53 (phpbb_root_path) Remote File Inclusion Vuln
SSV-7283 modifyform (modifyform.html) Remote File Inclusion Vulnerability
SSV-7280 phpsyncml <= 0.1.2 Remote File Include Vulnerabilities
SSV-7281 Streamline PHP Media Server 1.0-beta4 RFI Vulnerability
SSV-2230 phpFFL PHPFFL_File_Root参数远程文件包含漏洞
SSV-7274 Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability
SSV-7266 Joomla Component joom12Pic 1.0 Remote File Inclusion Vulnerability
SSV-7267 Joomla Component Flash Fun! 1.0 Remote File Inclusion Vulnerability
SSV-2221 NuclearBB send_queued_emails.php远程文件包含漏洞
SSV-17073 phpFFL 1.24 PHPFFL_FILE_ROOT Remote File Inclusion Vulnerabilities
SSV-17072 Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability
SSV-7264 Joomla Component joomlaradio v5 Remote File Inclusion Vulnerability
SSV-7256 X-Cart <= ? Multiple Remote File Inclusion Vulnerabilities
SSV-7257 NuclearBB Alpha 2 (root_path) Remote File Inclusion Vulnerability
SSV-2204 OFFL DOC_ROOT远程文件包含漏洞
SSV-2203 phpMyTourney menu.php远程文件包含漏洞
SSV-2205 fuzzylime cms getgalldata.php本地文件包含漏洞
SSV-2207 TxX CMS doc_root远程文件包含漏洞
SSV-7250 phpRealty 0.02 (MGR) Multiple Remote File Inclusion Vulnerabilities
SSV-7244 WebED 0.8999a Multiple Remote File Inclusion Vulnerabilities
SSV-7248 Focus/SIS <= 1.0/2.2 Remote File Inclusion Vulnerabilities
SSV-7247 fuzzylime cms <= 3.0 Local File Inclusion Vulnerability
SSV-7239 AnyInventory <= 2.0 (environment.php) Remote File Inclusion Vuln
SSV-7237 Online Fantasy Football League (OFFL) 0.2.6 RFI Vulnerabilities
SSV-2194 PHPOF DB_AdoDB.Class.PHP远程文件包含漏洞
SSV-7234 phpMytourney (menu.php) Remote File Inclusion Vulnerability
SSV-7228 AnyInventory <= 1.9.1 (environment.php) Remote File Inclusion Vuln
SSV-7226 PHPOF <= 20040226 (DB_adodb.class.php) RFI Vulnerability
SSV-7221 STPHPLibrary (STPHPLIB_DIR) Remote File Inclusion Vulnerability
SSV-7222 eNetman v.20050830 (index.php page) Remote File Inclusion Vulnerability
SSV-7219 Weblogicnet (files_dir) Multiple Remote File Inclusion Vulnerabilities
SSV-7202 phpBG 0.9.1 (rootdir) Remote File Inclusion Vulnerabilities
SSV-7195 PHPNuke-Clan <= 4.2.0 (mvcw_conver.php) RFI Vulnerability
SSV-7194 VWar <= v1.5.0 R15 (mvcw.php) Remote File Inclusion Vulnerability
SSV-7179 SomeryC <= 0.2.4 (include.php skindir) Remote File Inclusion Vulnerability
SSV-7180 2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability
SSV-7153 Squirrelcart <= 1.x.x (cart.php) Remote File Inclusion Vulnerability
SSV-2129 NcasterCMS Archive.PHP远程文件包含漏洞
SSV-7147 phpDVD v1.0.4 (dvd_config_file) Remote File Include Exploit
SSV-7149 FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability
SSV-7146 Exploits PHP Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability
SSV-2109 OpenAds Lib-RemoteHost.INC.PHP远程文件包含漏洞
SSV-2108 Lib2 PHP Library My_Statistics.PHP远程文件包含漏
SSV-2102 VietPHP远程文件包含漏洞
SSV-2101 PhpHostBot Login.PHP远程文件包含漏洞
SSV-7127 Ncaster 1.7.2 (archive.php) Remote File Inclusion Vulnerability
SSV-7131 Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability
SSV-7126 FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability
SSV-2096 Coppermine Photo Gallery YABBSE.INC.PHP远程文件包含漏洞
SSV-7122 PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability
SSV-7123 PHPNews 0.93 (format_menue) Remote File Inclusion Vulnerability
SSV-7091 Confixx Pro 3.3.1 (saveserver.php) Remote File Inclusion Vulnerability
SSV-7089 Article Directory (index.php page) Remote File Inclusion Vulnerability
SSV-2030 phpBB SupaNav模块远程文件包含漏洞
SSV-7073 RGameScript Pro (page.php id) Remote File Inclusion Vulnerability
SSV-7056 BBS E-Market (postscript.php p_mode) Remote File Inclusion Vulnerability
SSV-7062 phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability
SSV-17051 A-shop <= 0.70 Remote File Deletion Vulnerability
SSV-7048 MKPortal NoBoard Module (BETA) Remote File Inclusion Vulnerability
SSV-1991 FlashBB Sendmsg.PHP远程文件包含漏洞
SSV-1994 Mike's World Mail Machine Mailmachine.CGI本地文件包含漏洞
SSV-7038 FlashBB <= 1.1.8 (sendmsg.php) Remote File Inclusion Vulnerability
SSV-7024 LimeSurvey (PHPSurveyor) 1.49RC2 Remote File Inclusion Vulnerability
SSV-7015 iG Shop 1.4 eval Inclusion Vulnerability
SSV-6990 GL-SH Deaf Forum <= 6.4.4 Local File Inclusion Vulnerabilities
SSV-6984 QuickTicket 1.2 (qti_checkname.php) Local File Inclusion Vulnerability
SSV-1933 Pluxml Images.PHP远程文件包含漏洞
SSV-6985 QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities
SSV-6982 EVA-Web 1.1<= 2.2 (index.php3) Remote File Inclusion Vulnerabilities
SSV-6981 phpSiteBackup 0.1 (pcltar.lib.php) Remote File Inclusion Vulnerability
SSV-1918 B1GBB Footer.Inc.PHP远程文件包含漏洞
SSV-6971 b1gbb 2.24.0 (footer.inc.php tfooter) Remote File Inclusion Vulnerability
SSV-6967 DAGGER Web Engine <= 23jan2007 Remote File Inclusion Vulnerability
SSV-1913 SerWeb Load_Lang.PHP远程文件包含漏洞
SSV-1908 Musoo GLOBALS[ini_array]参数远程文件包含漏洞
SSV-1904 Sun Board Multiple Remote File Include Vulnerabilities
SSV-6961 Powl 0.94 (htmledit.php) Remote File Inclusion Vulnerability
SSV-6962 Sun Board 1.00.00 alpha Remote File Inclusion Vulnerabilities
SSV-6959 SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit
SSV-6957 LAN Management System (LMS) <= 1.9.6 Remote File Inclusion Exploit
SSV-6955 Musoo 0.21 Remote File Inclusion Vulnerabilities
SSV-6956 YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability
SSV-6954 XOOPS Module WiwiMod 0.4 Remote File Inclusion Vulnerability
SSV-6950 MiniBill 1.2.5 (run_billing.php) Remote File Inclusion Vulnerability
SSV-1887 PHPMyInventory Global.Inc.PHP远程文件包含漏洞
SSV-1885 Xoops XT-Conteudo模块Spaw_Control.Class.PHP远程文件包含漏洞
SSV-1882 PHP::HTML HTMLClass_Path远程文件包含漏洞
SSV-6948 YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability
SSV-6947 phpMyInventory 2.8 (global.inc.php) Remote File Inclusion Vulnerability
SSV-17036 MiniBB 2.0.5 (language) Local File Inclusion Exploit
SSV-1876 Xoops XFsection模块Dir_Module参数远程文件包含漏洞
SSV-6946 PHP::HTML 0.6.4 (phphtml.php) Remote File Inclusion Vulnerability
SSV-6945 Sitellite CMS <= 4.2.12 (559668.php) Remote File Inclusion Vulnerability
SSV-6944 XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
SSV-6943 XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
SSV-6942 XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
SSV-6935 XOOPS Module Horoscope 1.0 Remote File Inclusion Vulnerability
SSV-6934 XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability
SSV-6928 PHP Real Estate Classifieds Remote File Inclusion Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English