漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-6666 OpenSurveyPilot <= 1.2.1 Remote File Inclusion Vulnerability
SSV-6661 jGallery 1.3 (index.php) Remote File Inclusion Vulnerability
SSV-6664 Rezervi 0.9 (root) Remote File Inclusion Vulnerabilities
SSV-1643 XOOPS TeamSpeak Display TSDisplay4xoops_block2.PHP远程文件包含漏洞
SSV-1639 Actionpoll远程文件包含漏洞
SSV-1647 Simple PHP Script Gallery Index.PHP远程文件包含漏洞
SSV-1641 Mambo/Joomla New Article Absolute_Path远程文件包含漏洞
SSV-6656 Joomla Component JoomlaPack 1.0.4a2 RE (CAltInstaller.php) RFI
SSV-6660 Joomla Template Be2004-2 (index.php) Remote File Include Exploit
SSV-6654 Anthologia 0.5.2 (index.php ads_file) Remote File Inclusion Vulnerability
SSV-6658 Cabron Connector 1.1.0-Full Remote File Inclusion Vulnerability
SSV-6655 AjPortal2Php (PagePrefix) Remote File Inclusion Vulnerabilities
SSV-6650 XOOPS Module tsdisplay4xoops 0.1 Remote File Inclusion Vulnerability
SSV-6644 Gallery 1.2.5 (GALLERY_BASEDIR) Multiple RFI Vulnerabilities
SSV-6640 CodeBreak 1.1.2 (codebreak.php) Remote File Inclusion Exploit
SSV-6642 NMDeluxe 1.0.1 (footer.php template) Local File Inclusion Exploit
SSV-6646 Web Slider 0.6 (path) Remote File Inclusion Vulnerabilities
SSV-6648 SunShop Shopping Cart 3.5/4.0 (abs_path) RFI Vulnerabilities
SSV-6649 StoreFront for Gallery (GALLERY_BASEDIR) RFI Vulnerabilities
SSV-6647 openMairie 1.10 (scr/soustab.php) Local File Inclusion Vulnerability
SSV-6643 CNStats 2.9 (who_r.php bj) Remote File Inclusion Vulnerability
SSV-6645 audioCMS arash 0.1.4 (arashlib_dir) Remote File Inclusion Vulnerabilities
SSV-16991 SunShop Shopping Cart <= 3.5 (abs_path) RFI Vulnerabilities
SSV-1604 AroundMe远程文件包含漏洞
SSV-1605 CyBoards PHP Lite Default_Header.PHP远程文件包含漏洞
SSV-6625 Request It 1.0b (index.php id) Remote File Inclusion Vulnerability
SSV-1614 CodeWand PHPBrowse Include_Stream.Inc.PHP远程文件包含漏洞
SSV-6618 Joomla Module AutoStand 1.0 Remote File Inclusion Vulnerability
SSV-1613 Sisplet CMS Komentar.PHP远程文件包含漏洞
SSV-1609 MyBlog Games.PHP远程文件包含漏洞
SSV-6626 Expow 0.8 (autoindex.php cfg_file) Remote File Inclusion Vulnerability
SSV-6616 Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability
SSV-1610 PHPBB Mutant Mutant_Functions.PHP远程文件包含漏洞
SSV-6620 Garennes 0.6.1 (repertoire_config) Remote File Inclusion Vulnerabilities
SSV-6619 Pixaria Gallery 1.x (class.Smarty.php) Remote File Include Vulnerability
SSV-16983 mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit
SSV-16985 RicarGBooK 1.2.1 (header.php lang) Local File Inclusion Vulnerability
SSV-16984 WebKalk2 1.9.0 (absolute_path) Remote File Inclusion Vulnerability
SSV-16982 Joomla Component mosMedia <= 1.0.8 Remote File Inclusion Vulnerability
SSV-16978 Gran Paradiso 3.0a3 non-existent applet Denial of Service Exploit
SSV-16977 TOSMO/Mambo 1.4.13a (absolute_path) Remote File Inclusion Vulns
SSV-16980 Mambo Module Weather (absolute_path) RFI Vulnerability
SSV-16981 Mambo Module Calendar (Agenda) 1.5.5 RFI Vulnerability
SSV-16976 Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
SSV-16975 SimpCMS <= 04.10.2007 (site) Remote File Inclusion Vulnerability
SSV-6604 PHP-Nuke Module eBoard 1.0.7 GLOBALS[name] LFI Exploit
SSV-6598 PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability
SSV-16973 Joomla/Mambo Component Taskhopper 1.1 RFI Vulnerabilities
SSV-6605 Scorp Book 1.0 (smilies.php config) Remote File Inclusion Vulnerability
SSV-16970 Weatimages <= 1.7.1 ini[langpack] Remote File Inclusion Vulnerability
SSV-16972 InoutMailingListManager <= 3.1 Remote Command Execution Exploit
SSV-6597 Pathos CMS 0.92-2 (warn.php file) Remote File Inclusion Vulnerability
SSV-16974 pL-PHP beta 0.9 Multiple Remote Vulnerabilities
SSV-16969 phpGalleryScript 1.0 (init.gallery.php include_class) RFI Vulnerability
SSV-6601 ScarNews 1.2.1 (sn_admin_dir) Local File Inclusion Exploit
SSV-16971 Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution
SSV-6602 WitShare 0.9 (index.php menu) Local File Inclusion Vulnerability
SSV-6600 PcP-Guestbook 3.0 (lang) Local File Inclusion Vulnerabilities
SSV-6592 PHP-Generics 1.0.0 beta Multiple Remote File Inclusion Vulnerabilities
SSV-6593 CodeWand phpBrowse (site_path) Remote File Inclusion Vulnerability
SSV-16955 AROUNDMe 0.7.7 Multiple Remote File Inclusion Vulnerabilities
SSV-16954 phpMyNewsletter 0.6.10 (customize.php l) RFI Vulnerability
SSV-16956 CyBoards PHP Lite 1.21 (script_path) Remote File Include Exploit
SSV-6561 MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability
SSV-1593 Softerra Time-Assistant远程文件包含漏洞
SSV-1590 Kaqoo Auction Install_Root远程文件包含漏洞
SSV-6565 Really Simple PHP and Ajax (RSPA) 2007-03-23 RFI Vulnerability
SSV-6564 Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit
SSV-6568 MapLab MS4W 2.2.1 Remote File Inclusion Vulnerability
SSV-6556 JSBoard 2.0.10 (login.php table) Local File Inclusion Vulnerability
SSV-6557 phpBB MOD Forum picture and META tags 1.7 RFI Vulnerability
SSV-6547 CWB PRO 1.5 (INCLUDE_PATH) Remote File Inclusion Vulnerabilities
SSV-6550 BT-sondage 1.12 (gestion_sondage.php) RFI Vulnerability
SSV-6525 Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
SSV-1578 AY System Solutions Web Content System远程文件包含漏洞
SSV-6530 Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln
SSV-6526 Kaqoo Auction (install_root) Multiple Remote File Include Vulnerabilities
SSV-6529 sBLOG 0.7.3 Beta (inc/lang.php) Local File Inclusion Exploit
SSV-1570 Free File Hosting System远程文件包含漏洞
SSV-1563 Net Side CMS Index.PHP远程文件包含漏洞
SSV-1569 C-Arbre远程文件包含漏洞
SSV-1562 Mambo FlatMenu Module MosConfig_Absolute_Path参数远程文件包含漏洞
SSV-6516 CodeBB 1.0 beta 2 (phpbb_root_path) Remote File Inclusion Vulnerability
SSV-6512 MangoBery CMS 0.5.5 (quotes.php) Remote File Inclusion Vulnerability
SSV-6518 iPhotoAlbum 1.1 (header.php) Remote File Include Vulnerability
SSV-16945 Advanced Login &lt;= 0.7 (root) Remote File Inclusion Vulnerability
SSV-6497 PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit
SSV-1552 LMS Userpanel.PHP远程文件包含漏洞
SSV-6496 C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability
SSV-6491 Web Content System 2.7.1 Remote File Inclusion Exploit
SSV-6471 Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
SSV-6476 Net-Side.net CMS (index.php cms) Remote File Inclusion Vulnerability
SSV-6472 Mambo Module Flatmenu <= 1.07 Remote File Include Exploit
SSV-16928 Mambo Module Flatmenu &lt;= 1.07 Remote File Include Exploit
SSV-16929 Free Image Hosting &lt;= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
SSV-16930 PBlang &lt;= 4.66z Remote Create Admin Exploit
SSV-1542 PHPRaid RSS.PHP远程文件包含漏洞
SSV-6469 ClassWeb 2.0.3 (BASE) Remote File Inclusion Vulnerabilities
SSV-1536 Digital Eye Gallery Module.PHP远程文件包含漏洞
SSV-1545 Study Planner SPL_CFG['dirroot']远程文件包含漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English