漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-1531 WebCalendar IncludeDi远程文件包含漏洞
SSV-1540 NFN Address Book mosConfig_Absolute_Path远程文件包含漏洞
SSV-6459 LMS <= 1.8.9 Vala Remote File Inclusion Vulnerabilities
SSV-6460 Joomla/Mambo Component SWmenuFree 4.0 RFI Vulnerability
SSV-6467 RoseOnlineCMS 3 beta2 (op) Local File Inclusion Exploit
SSV-6457 Joomla Component Joomlaboard 1.1.1 (sbp) RFI Vulnerability
SSV-16922 Philex <= 0.2.3 RFI / File Disclosure Remote Vulnerabilities
SSV-6445 Study planner (Studiewijzer) <= 0.15 Remote File Inclusion Vulnerability
SSV-6450 Mambo Component nfnaddressbook 0.4 Remote File Inclusion Vulnerability
SSV-6446 Digital Eye CMS 0.1.1b (module.php) Remote File Inclusion Vulnerability
SSV-6436 PHP-Nuke Module htmltonuke 2.0alpha (htmltonuke.php) RFI Vuln
SSV-6438 Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit
SSV-1519 PHP-Nuke IFrame Module IFrame.PHP远程文件包含漏洞
SSV-6435 GeBlog 0.1 GLOBALS[tplname] Local File Inclusion Exploit (win)
SSV-6431 PHP-Nuke Module splattforum 4.0 RC1 Local File Inclusion Exploit
SSV-6437 phpRaid < 3.0.7 (rss.php phpraid_dir) Remote File Inclusion Exploit
SSV-6434 pragmaMX Module Landkarten 2.1 Local File Inclusion Exploit (win)
SSV-1499 CCMail Update.PHP远程文件包含漏洞
SSV-1500 Dayfox Blog Postpost.PHP远程文件包含漏洞
SSV-1506 Active PHP Bookmarks Head.PHP远程文件包含漏洞
SSV-6421 iFrame for Phpnuke (iframe.php) Remote File Inclusion Vulnerability
SSV-1496 WebCreator远程文件包含漏洞
SSV-6408 PHP DB Designer <= 1.02 Remote File Include Vulnerabilities
SSV-16915 MPM Chat 2.5 (view.php logi) Local File Include Vulnerability
SSV-16914 Php-Stats <= 0.1.9.1b (php-stats-options.php) admin 2 exec() eExploit
SSV-16916 Active PHP Bookmark Notes <= 0.2.5 Remote File Inclusion Exploit
SSV-6406 Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability
SSV-6401 WebCalendar 0.9.45 (includedir) Remote File Inclusion Vulnerability
SSV-6405 Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability
SSV-6404 CcMail 1.0.1 (update.php functions_dir) Remote File Inclusion Exploit
SSV-6389 ZomPlog <= 3.7.6 Local File Inclusion Vulnerabilty (win32)
SSV-1485 cPanel本地文件包含漏洞
SSV-1484 ClipShare ADODB-Connection.Inc.PHP远程文件包含漏洞
SSV-6394 CARE2X 1.1 (root_path) Remote File Inclusion Vulnerability
SSV-6393 Activist Mobilization Platform (AMP) 3.2 Remote File Include Vuln
SSV-6395 WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability
SSV-6383 OES (Open Educational System) 0.1beta Remote File Inclusion Vuln
SSV-6379 GestArt beta 1 (aide.php aide) Remote File Inclusion Vulnerability
SSV-16903 WebCreator &lt;= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability
SSV-6365 WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability
SSV-6354 PostNuke Module phgstats 0.5 (phgdir) Remote File Include Exploit
SSV-6364 cPanel <= 10.9.x (fantastico) Local File Inclusion Vulnerabilities
SSV-6349 PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability
SSV-6346 WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vuln
SSV-6348 Magic CMS 4.2.747 (mysave.php file) Remote File Include Vulnerability
SSV-6315 PHP-Nuke Module PostGuestbook 0.6.1 (tpl_pgb_moddir) RFI Vulnerability
SSV-16886 PHP &lt;= 5.2.1 substr_compare() Information Leak Exploit
SSV-6301 Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability
SSV-16880 Asterisk &lt;= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit
SSV-6285 STWC-Counter &lt;= 3.4.0 (downloadcounter.php) RFI Exploit
SSV-16879 Mani Stats Reader &lt;= 1.2 (ipath) Remote File Include Vulnerability
SSV-6263 Extreme phpBB 3.0.1 (functions.php) Remote File Include Exploit
SSV-6268 Sinapis 2.2 Gastebuch (sinagb.php fuss) Remote File Include Vulnerability
SSV-6261 Admin Phorum 3.3.1a (del.php include_path) RFI Vulnerability
SSV-6267 FCRing <= 1.31 (fcring.php s_fuss) Remote File Include Vulnerability
SSV-6262 STWC-Counter <= 3.4.0 (downloadcounter.php) RFI Exploit
SSV-6265 CS-Gallery 2.0 (index.php album) Remote File Include Exploit
SSV-6266 phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit
SSV-6256 Admin Phorum 3.3.1a (del.asp include_path) RFI Vulnerability
SSV-6257 STWC-Counter &lt;= 3.4.0 (downloadcounter.asp) RFI Exploit
SSV-16872 Plan 9 Kernel (devenv.c OTRUNC/pwrite) Local Exploit
SSV-6247 PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability
SSV-16871 Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability
SSV-6245 eFiction <= 3.1.1 (path_to_smf) Remote File Include Vulnerabilities
SSV-6240 FlashGameScript 1.5.4 (index.php func) Remote File Include Vulnerability
SSV-6226 DBGuestbook 1.1 (dbs_base_path) Remote File Include Vulnerabilities
SSV-6225 DBImageGallery 1.2.2 (donsimg_base_path) RFI Vulnerabilities
SSV-6229 Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability
SSV-16869 eFiction &lt;= 3.1.1 (path_to_smf) Remote File Include Vulnerabilities
SSV-6210 VS-Link-Partner <= 2.1 (script_pfad) Remote File Include Exploit
SSV-6214 Vivvo Article Manager 3.4 (root) Local File Inclusion Vulnerability
SSV-6206 S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
SSV-6211 Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability
SSV-16855 S-Gastebuch &lt;= 1.5.3 (gb_pfad) Remote File Include Exploit
SSV-16854 VS-Link-Partner &lt;= 2.1 (script_pfad) Remote File Include Exploit
SSV-6200 nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability
SSV-16853 VS-News-System &lt;= 1.2.1 (newsordner) Remote File Include Exploit
SSV-6203 Jupiter CMS 1.1.5 (index.php) Local/Remote File Include Vulnerability
SSV-6199 ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities
SSV-6183 AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit
SSV-16843 AT Contenator &lt;= v1.0 (Root_To_Script) Remote File Include Exploit
SSV-6180 OPENi-CMS Site Protection Plugin Remote File Inclusion Vulnerability
SSV-1403 AgerMenu Top.Inc.PHP远程文件包含漏洞
SSV-1406 WebMatic Index_Album.PHP Remote File Include Vulnerabilitie
SSV-6176 ezConvert: phpBB ezBoard converter v0.2 (ezconvert_dir) Remote File Include Exploit
SSV-1399 LightRO CMS Inhalt.PHP远程文件包含漏洞
SSV-1397 Geeklog远程文件包含漏洞
SSV-1390 phpBB++ PHPBB_Root_Path远程文件包含漏洞
SSV-1391 PHPProbid Lang.PHP远程文件包含漏洞
SSV-1389 DreamStats System Rootpath远程文件包含漏洞
SSV-6165 Site-Assistant &lt;= v0990 (paths[version]) Remote File Include Exploit
SSV-6153 WebMatic 2.6 (index_album.php) Remote File Include Vulnerability
SSV-6161 AgerMenu 0.01 (top.inc.php rootdir) Remote File Include Vulnerability
SSV-6164 Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability
SSV-1374 Epistemon Common.Inc.PHP远程文件包含漏洞
SSV-1375 PHP Web Portail Includes.PHP远程文件包含漏洞
SSV-6142 LightRO CMS 1.0 (inhalt.php) Remote File Include Vulnerability
SSV-6139 Categories hierarchy phpBB Mod 2.1.2 (phpbb_root_path) RFI Exploit
SSV-6135 Geeklog 2 (BaseView.php) Remote File Inclusion Vulnerability
SSV-6137 SMA-DB &lt;= 0.3.9 (settings.php) Remote File Inclusion Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English