漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-6914 Kravchuk letter script 1.0 (scdir) Remote File Inclusion Vulnerabilities
SSV-6919 NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit
SSV-1842 Xoops iContent模块Spaw_Control.Class.PHP远程文件包含漏洞
SSV-6907 Madirish Webmail 2.0 (addressbook.php) Remote File Inclusion Vuln
SSV-6896 XOOPS Module icontent 1.0 Remote File Inclusion Exploit
SSV-1811 Geeklog CAPTCHA Plugin _CONF[path]远程文件包含漏洞
SSV-6881 AdminBot 9.0.5 (live_status.lib.php ROOT) RFI Vulnerability
SSV-6873 OpenBASE 0.6a (root_prefix) Remote File Inclusion Vulnerabilities
SSV-6874 vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities
SSV-6870 TROforum 0.1 (admin.php site_url) Remote File Inclusion Vulnerability
SSV-6878 Mazens PHP Chat V3 (basepath) Remote File Inclusion Vulnerabilities
SSV-6872 FlaP 1.0b (pachtofile) Remote File Inclusion Vulnerabilities
SSV-6869 Webavis 0.1.1 (class.php root) Remote File Inclusion Vulnerability
SSV-6862 FirmWorX 0.1.2 Multiple Remote File Inclusion Vulnerabilities
SSV-6855 Scallywag (template.php path) Remote File Inclusion Vulnerabilities
SSV-1789 Ol' Bookmarks Themes Root远程文件包含漏洞
SSV-6852 PHPSecurityAdmin <= Remote File Include Exploit
SSV-6844 Ol Bookmarks Manager 0.7.4 (root) Remote File Inclusion Vulnerabilities
SSV-1782 SunLight CMS Root参数多个远程文件包含漏洞
SSV-1781 Madirish Webmail AddressBook.PHP远程文件包含漏洞
SSV-1777 Build It Fast远程文件包含漏洞
SSV-6838 SunLight CMS 5.3 (root) Remote File Inclusion Vulnerabilities
SSV-1774 PHPGlossar Format_Menue远程文件包含漏洞
SSV-1772 Geeklog ImageImageMagick.PHP远程文件包含漏洞
SSV-6835 Libstats <= 1.0.3 (template_csv.php) Remote File Inclusion Vulnerability
SSV-6832 GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability
SSV-1763 Beacon Splash.lang.PHP远程文件包含漏洞
SSV-6833 Build it Fast (bif3) 0.4.1 Multiple Remote File Inclusion Vulnerabilities
SSV-6828 PHPGlossar 0.8 (format_menue) Remote File Inclusion Vulnerabilities
SSV-6826 Glossword 1.8.1 custom_vars.php Remote File Inclusion Vulnerability
SSV-6816 Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability
SSV-6813 Media Gallery for Geeklog <= 1.4.8a Remote File Inclusion Vulnerability
SSV-6812 Linksnet Newsfeed 1.0 Remote File Inclusion Vulnerability
SSV-1752 PHPFirstPost Block.PHP远程文件包含漏洞
SSV-6807 CJG EXPLORER PRO 3.2 (g_pcltar_lib_dir) RFI Vulnerabilities
SSV-6810 Feindt Computerservice News 2.0 (newsadmin.php action) RFI Vuln
SSV-6798 PHP FirstPost 0.1 (block.php Include) Remote File Inclusion Exploit
SSV-6801 Beacon 0.2.0 (splash.lang.php) Remote File Inclusion Vulnerability
SSV-6800 YAAP <= 1.5 __autoload() Remote File Inclusion Vulnerability
SSV-1743 PHPMyPortal Articles.Inc.PHP远程文件包含漏洞
SSV-6793 R2K Gallery 1.7 (galeria.php lang2) Local File Inclusion Vulnerability
SSV-1742 WordPress多个插件远程文件包含漏洞
SSV-6785 Original 0.11 config.inc.php x[1] Remote File Inclusion Vulnerability
SSV-6780 phpMyPortal 3.0.0 RC3 GLOBALS[CHEMINMODULES] RFI Exploit
SSV-6781 aForum <= 1.32 (CommonAbsDir) Remote File Inclusion Vulnerability
SSV-6782 telltarget <= 1.3.3 (tt_docroot) Remote File Inclusion Vulnerabilities
SSV-6765 NoAh <= 0.9 pre 1.2 (mfa_theme.php) Remote File Inclusion Vulnerability
SSV-17002 Opera 9.10 alert() Remote Denial of Service Exploit
SSV-1717 PHPBandManager Index.PHP远程文件包含漏洞
SSV-6770 ACGVAnnu <= 1.3 (acgv.php rubrik) Local File Inclusion Vulnerability
SSV-17001 LaVague <= 0.3 (printbar.php views_path) RFI Vulnerability
SSV-6769 Tropicalm Crowell Resource 4.5.2 (RESPATH) RFI Vulnerabilities
SSV-6768 Friendly <= 1.0d1 (friendly_path) Remote File Inclusion Vulnerabilities
SSV-6771 DynamicPAD <= 1.02.18 (HomeDir) Remote File Inclusion Vulnerabilities
SSV-6767 Wikivi5 (show.php sous_rep) Remote File Inclusion Vulnerability
SSV-6772 Berylium2 2003-08-18 (beryliumroot) Remote File Inclusion Vulnerability
SSV-6760 vm watermark for Gallery 0.4.1 Remote File Inclusion Vulnerability
SSV-6762 Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns
SSV-6763 PHPtree 1.3 (cms2.php s_dir) Remote File Inclusion Vulnerability
SSV-6752 workbench 0.11 (header.php path) Remote File Inclusion Vulnerability
SSV-6749 E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability
SSV-6753 PHP TopTree BBS 2.0.1a (right_file) Remote File Inclusion Vulnerability
SSV-6750 Versado CMS 1.07 (ajax_listado.php urlModulo) RFI Vulnerability
SSV-6754 Persism CMS 0.9.2 system[path] Remote File Inclusion Vulnerabilities
SSV-6755 PMECMS 1.0 config[pathMod] Remote File Inclusion Vulnerabilities
SSV-6736 mxBB Module FAQ & RULES 2.0.0 Remote File Inclusion Exploit
SSV-6733 Wordpress plugin myflash <= 1.00 (wppath) RFI Vulnerability
SSV-6730 Wordpress plugin wp-Table <= 1.43 (inc_dir) RFI Vulnerability
SSV-6740 Open Translation Engine (OTE) 0.7.8 (header.php ote_home) RFI Vuln
SSV-6732 Sendcard <= 3.4.1 (sendcard.php form) Local File Inclusion Vulnerability
SSV-6739 phpChess Community Edition 2.0 Multiple RFI Vulnerabilities
SSV-6731 Wordpress plugin wordTube <= 1.43 (wpPATH) RFI Vulnerability
SSV-6720 Imageview 5.3 (fileview.php album) Local File Inclusion Vulnerability
SSV-6718 Wordpress Plugin myGallery <= 1.4b4 Remote File Inclusion Vulnerability
SSV-1703 MyNewsGroups Include.PHP远程文件包含漏洞
SSV-1697 GPB Bulletin Board远程文件包含漏洞
SSV-1700 Ahhp Portal Page.PHP远程文件包含漏洞
SSV-1701 Comus Accept.PHP远程文件包含漏洞
SSV-1698 Advanced Webhost Billing System Cart2.PHP远程文件包含漏洞
SSV-1699 Active PHP Bookmarks APB.PHP远程文件包含漏洞
SSV-6714 burnCMS <= 0.2 (root) Remote File Inclusion Vulnerabilities
SSV-6708 Firefly 1.1.01 (doc_root) Remote File Inclusion Vulnerabilities
SSV-6707 phpOracleView (include_all.inc.php page_dir) RFI Vulnerability
SSV-6706 phpBandManager 0.8 (index.php pg) Remote File Inclusion Vulnerability
SSV-1683 Joomla! PCLTar.PHP远程文件包含漏洞
SSV-1685 LMS RTMessageAdd.PHP远程文件包含漏洞
SSV-6690 wavewoo 0.1.1 (loading.php path_include) Remote File Inclusion Exploit
SSV-6689 Advanced Webhost Billing System (AWBS) cart2.php RFI Vulnerability
SSV-1677 WEBinsta FM login.php远程文件包含漏洞
SSV-6684 Joomla 1.5.0 Beta (pcltar.php) Remote File Inclusion Vulnerability
SSV-1675 Supasite远程文件包含漏洞
SSV-1676 PHP Turbulence Turbulence.PHP远程文件包含漏洞
SSV-6679 WEBInsta FM 0.1.4 login.php absolute_path Remote File Inclusion Exploit
SSV-1668 OpenSurveyPilot Group.Inc.PHP远程文件包含漏洞
SSV-1663 Fully Modded PHPBB2 PHPBB_Root_Path远程文件包含漏洞
SSV-1664 MXBB MX Smartor Module PHPBB_Root_Path远程文件包含漏洞
SSV-6673 Supasite 1.23b Multiple Remote File Inclusion Vulnerabilities
SSV-1659 Rezervi Root远程文件包含漏洞
SSV-1655 Joomla Template Module Index.PHP远程文件包含漏洞
SSV-6667 Mx Module Smartor Album FAP 2.0 RC 1 Remote File Inclusion Vuln
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English