漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-19643 CMSQLite <= 1.2 mod参数本地文件包含漏洞
SSV-19633 Joomla Component MS Comment LFI Vulnerability
SSV-19625 Joomla Component Seber Cart (getPic.php) Local File Disclosure Vulnerability
SSV-19601 Joomla Custom PHP Pages Component com_php LFI Vulnerability
SSV-19517 Joomla Component graphics (com_graphics) v1.0.6 LFI Vulnerability
SSV-19492 Joomla! AWDwall Components SQL Injection and Local File Inclusion Vulnerabilities
SSV-19473 Joomla Component Archery Scores (com_archeryscores) v1.0.6 LFI Vulnerability
SSV-19477 Joomla Component iF surfALERT com_if_surfalert Local File Inclusion Vulnerability
SSV-19472 Joomla Component Gadget Factory com_gadgetfactory Local File Inclusion Vulnerability
SSV-19464 Joomla Component BeeHeard Lite com_beeheard Local File Inclusion Vulnerability
SSV-19443 HotNews 0.7.2 Remote File Inclusion Vulnerability
SSV-19426 Joomla Component Webee Comments Local File Inclusion Vulnerability
SSV-19431 Joomla webERPcustomer Component "controller" Local File Inclusion Vulnerability
SSV-19418 Joomla Component Realtyna Translator Local File Inclusion Vulnerability
SSV-19417 Joomla Component aWiki com_awiki Local File Inclusion
SSV-19413 Plume CMS 1.2.4 Multiple Local File Inclusion Vulnerabilities
SSV-19406 Joomla Component Appointment com_appointment Local File Inclusion Vulnerability
SSV-19407 Joomla Component Affiliate Feeds com_datafeeds Local File Inclusion Vulnerability
SSV-19392 Joomla Component com_shoutbox LFI Vulnerability
SSV-19393 Joomla Component com_loginbox LFI Vulnerability
SSV-19367 Joomla Component DW Graph Local File Inclusion
SSV-19378 Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 Multiple Local File Vulnerability
SSV-19349 Direct News 4.10.2 Multiple Remote File Include Vulnerability
SSV-19327 Joomla Component SMEStorage Local File Inclusion
SSV-19319 Joomla component com_jwmmxtd <= Remote File Inclusion Vulnerability
SSV-19300 joomla component & plugin JE Tooltip Local File Inclusion
SSV-19290 Nensor CMS 2.01 Multiple Remote Vulnerabilities
SSV-19291 SOFTSAURUS 2.01 Multiple Remote File Include Vulnerabilities
SSV-19275 Joomla Component com_rokdownloads - Local File Inclusion
SSV-19233 ShopEx <= 4.7 verifycode.php 远程包含漏洞
SSV-19218 Gnat-TGP <= 1.2.20 Remote File Include Vulnerability
SSV-19161 Joomla Component com_communitypolls LFI Vulnerability
SSV-19130 Joomla Component com_otzivi Local File Inclusion Vulnerability
SSV-19092 EncapsCMS <= 0.3.6 (config[path]) Remote File Include Vulnerability
SSV-19084 Cpanel Image Manager Local File Include Exploit
SSV-19065 Phpwind7.5 后台本地包含漏洞
SSV-19024 Joomla Component com_ccnewsletter LFI Vulnerability
SSV-15220 phpwind 7.5 apps/groups/index.php远程包含漏洞
SSV-15219 phpwind 7.5 apps/share/index.php远程包含漏洞
SSV-15218 phpwind 7.5 api/class_base.php Include Vulnerabilities
SSV-87932 WordPress FireStats 模块远程文件包含漏洞
SSV-18883 fileNice php file browser RFI and LFI Vulnerabilities
SSV-18879 pL-PHP <= beta 0.9 Local File Include Exploit
SSV-18884 Weatimages Directory Traversal and LFI Vulnerabilities
SSV-18886 AdaptBB 1.0 RFI Vulnerability
SSV-87880 phpbb 1.2.4RC3 download.php 远程文件包含漏洞
SSV-18841 UBB.threads v6 RFI Vulnerability
SSV-18824 ActiveKB RFI Vulnerability
SSV-15158 DBHCMS Web Content Management System v1.1.4 RFI Vulnerability
SSV-88024 phpcms 2.4 guestbook.php default.php 远程文件包含漏洞
SSV-18801 Joomla Component com_if_nexus Remote File Include
SSV-18773 Joomla Component com_morfeoshow RFI Vulnerability
SSV-18768 ta3arof [dating] Script Arabic Version Upload Shell Vulnerability
SSV-18769 PHP Uploader Downloader v2.0 Upload Shell Vulnerability
SSV-18737 FlatPress Cross Site Scripting Vulnerability
SSV-18754 Gallery v2.3 RFI Vulnerability
SSV-18748 dB Masters Multimedia Insecure Cookie Handling Vulnerability
SSV-18772 PHP Uploader Downloader v2.0 Cross Site Scripting Vulnerability
SSV-18762 Nuked-Klan SP4 RFI Vulnerability
SSV-18750 HowMany V2.6 RFI Vulnerability
SSV-18739 IMG2ASCII Cross Site Scripting Vulnerability
SSV-18726 PHPShop Version 0.6 by pass Vulnerability
SSV-18757 MyShoutPro v1.2 Final Cross Site Scripting Vulnerability
SSV-18749 Image File Upload Upload Shell Vulnerability
SSV-18740 EZPX My photoblog v1.2 Upload Shell Vulnerability
SSV-18732 TomatoCart Backup Vulnerability
SSV-18738 file upload Ar Version Upload Shell Vulnerability
SSV-18735 CactuShop v6 Database Disclosure Vulnerability
SSV-18733 Upload-Point 1.6 Beta Upload Shell Vulnerability
SSV-18743 ES Simple Uploader v 1.1 Upload Shell Vulnerability
SSV-18744 Lizard Cart Upload Shell Vulnerability
SSV-18763 Esinti Web Design Gold Defter Database Disclosure Vulnerability
SSV-18767 DBHCMS - Web Content Management System v1.1.4 RFI Vulnerability
SSV-18734 Best Top List v2.11 Upload Shell Vulnerability
SSV-18725 worksystem 4.0.5 RFI Vulnerability
SSV-18736 SaphpLesson 4.0 food RFI Vulnerability
SSV-18741 FreeForum 1.7 Cross Site Scripting Vulnerability
SSV-18746 e-pay 1.55 RFI Vulnerability
SSV-18731 Dros RFI Vulnerability
SSV-18770 PHP Football Version : 1.0 Cross Site Scripting Vulnerability
SSV-18745 epay Backup Vulnerability
SSV-18742 FreeForum 1.7 RFI Vulnerability
SSV-18747 e-cart 3.0 Multiple Vulnerabilities
SSV-18729 E-Pay RFI Vulnerability
SSV-18756 osCommerce online Shop Backup
SSV-18755 MyCart shopping cart Upload Shell Vulnerability
SSV-18771 Nuked-Klan 1.7.7 RFI Vulnerability
SSV-18730 SAIBAL DOWNLOAD AREA V.2.0 Upload Shell Vulnerability
SSV-18701 asaher pro 1.0 RFI Vulnerability
SSV-15140 PHP-Calendar configfile变量远程文件包含漏洞
SSV-18703 APHP ImgList 1.2.2 Cross Site Scripting Vulnerability
SSV-18702 Winn Guestbook V2.4 Winn.ws Cross Site Scripting Vulnerability
SSV-18704 Best Top List Cross Site Scripting Vulnerability
SSV-15132 phpLDAPadmin cmd参数本地文件包含漏洞
SSV-15118 phpPollScript <= 1.3 Remote File Include Vulnerability
SSV-15123 Joomla Component com_jcalpro Remote FiLe include RFI
SSV-15121 Simple PHP Blog <= 0.5.1 Local File Include vulnerability
SSV-87676 phpMyAdmin 2.7.0 全局变量覆盖导致文件包含漏洞
SSV-18624 Explorer V7.20 Cross Site Scripting Vulnerability
SSV-18622 SaurusCMS <= 4.6.4 Multiple RFI Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English