漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-16633 Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
SSV-16636 Minichat v6 (ftag.php) Remote File Include Vulnerability
SSV-16635 SH-News <= 3.1 (scriptpath) Multiple Remote File Include Vulnerabilities
SSV-16632 n@board <= 3.1.9e (naboard_pnr.php) Remote File Include Vulnerability
SSV-16634 CommunityPortals 1.0 (import-archive.php) File Include Vulnerability
SSV-16628 vtiger CRM <= 4.2 (calpath) Multiple Remote File Include Vulnerabilities
SSV-16618 Flatnuke <= 2.5.8 file() Priv Escalation / Code Execution Exploit
SSV-16622 registroTL (main.php) Remote File Include Vulnerability
SSV-16629 Exhibit Engine <= 1.5 RC 4 (photo_comment.php) File Include Exploit
SSV-16630 Claroline <= 1.8.0 rc1 (import.lib.php) Remote File Include Vulnerability
SSV-16619 Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit
SSV-16625 JASmine <= 0.0.2 (index.php) Remote File Include Vulnerability
SSV-16620 phpMyAgenda <= 3.1 (templates/header.php3) Local File Include Exploit
SSV-16623 compteur v2 (param_editor.php) Remote File Include Vulnerability
SSV-16621 TribunaLibre 3.12 Beta (ftag.php) Remote File Include Vulnerability
SSV-16627 Album Photo Sans Nom <= 1.6 Remote Source Disclosure Vulnerability
SSV-16624 eboli (index.php) Remote File Include Vulnerability
SSV-16631 PHPLibrary <= 1.5.3 (grid3.lib.php) Remote File Include Vulnerability
SSV-16626 Foafgen <= 0.3 (redir.php) Local Source Disclosure Vulnerability
SSV-16615 OpenDock Easy Blog <=1.4 (doc_directory) File Include Vulnerabilities
SSV-16617 OpenDock Easy Gallery <= 1.4 (doc_directory) File Include Vulnerabilities
SSV-16616 WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities
SSV-16614 OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
SSV-16611 Freenews <= 1.1 (moteur.php) Remote File Include Vulnerability
SSV-16609 PHPMyNews <= 1.4 (cfg_include_dir) Remote File Include Vulnerabilities
SSV-16612 phpPC <= 1.03 RC1 (/lib/functions.inc.php) Remote File Include Exploit
SSV-16610 Ciamos CMS <= 0.9.6b (config.php) Remote File Include Exploit
SSV-16605 FreeForum <= 0.9.7 (forum.php) Remote File Include Vulnerability
SSV-16604 phpBB User Viewed Posts Tracker <= 1.0 File Include Vulnerability
SSV-16602 phpBB Security Suite Mod 1.0.0 (logger_engine.php) Remote File Include
SSV-16600 phpMyTeam <= 2.0 (smileys_dir) Remote File Include Vulnerability
SSV-16603 Dimension of phpBB <= 0.2.6 (phpbb_root_path) Remote File Includes
SSV-16596 JAF CMS <= 4.0 RC1 Multiple Remote File Include Vulnerabilities
SSV-16598 phpGreetz <= 0.99 (footer.php) Remote File Include Vulnerability
SSV-16599 phpBB Static Topics <= 1.0 [phpbb_root_path] File Include Vulnerability
SSV-16597 phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
SSV-16591 JAF CMS <= 4.0 RC1 (forum.php) Remote File Include Exploit
SSV-16593 Travelsized CMS <= 0.4 (frontpage.php) Remote File Include Exploit
SSV-16594 Klinza Professional CMS <= 5.0.1 (show_hlp.php) File Include Exploit
SSV-16592 phpMyProfiler <= 0.9.6 Remote File Include Vulnerability
SSV-16590 BBaCE <= 3.5 (includes/functions.php) Remote File Include Vulnerability
SSV-16588 BasiliX 1.1.1 (BSX_LIBDIR) Remote File Include Exploit
SSV-16585 phpMyWebmin <= 1.0 (target) Remote File Include Vulnerabilities
SSV-16586 Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
SSV-16587 Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)
SSV-16579 PowerPortal 1.3a (index.php) Remote File Include Vulnerability
SSV-16580 VideoDB <= 2.2.1 (pdf.php) Remote File Include Exploit
SSV-16583 Forum82 <= 2.5.2b (repertorylevel) Multiple File Include Vulnerabilities
SSV-16578 phpBB XS <= 0.58a (phpbb_root_path) Remote File Include Vulnerability
SSV-16577 phpSecurePages <= 0.28b (secure.php) Remote File Include Vulnerability
SSV-16576 phpMyWebmin 1.0 (window.php) Remote File Include Vulnerability
SSV-16575 TagIt! Tagboard <= 2.1.b b2 (index.php) Remote File Include Vulnerability
SSV-16572 PPA Gallery <= 1.0 (functions.inc.php) Remote File Include Exploit
SSV-16574 Les Visiteurs (Visitors) <= 2.0 (config.inc.php) File Include Vulnerability
SSV-16570 Newswriter SW 1.4.2 (main.inc.php) Remote File Include Exploit
SSV-16571 OpenSSH <= 4.3 p1 (Duplicated Block) Remote Denial of Service Exploit
SSV-16566 Newswriter SW <= 1.42 (editfunc.inc.php) File Include Vulnerability
SSV-16569 A-Blog 2.0 Multiple Remote File Include Vulnerabilities
SSV-16565 Kietu? <= 4.0.0b2 (hit.php) Remote File Include Vulnerability
SSV-16563 A-Blog V2 (menu.php) Remote File Include Vulnerability
SSV-16562 WEB//NEWS <= 1.4 (parser.php) Remote File Include Vulnerability
SSV-16564 paBugs <= 2.0 Beta 3 (class.mysql.php) Remote File Include Exploit
SSV-16560 BrudaGB <= 1.1 (admin/index.php) Remote File Include Vulnerability
SSV-16561 faceStones personal <= 2.0.42 (fs_form_links.php) File Include Vuln
SSV-16555 Polaring <= 0.04.03 (general.php) Remote File Include Vulnerability
SSV-16558 evoBB <= 0.3 (path) Remote File Include Vulnerability
SSV-16557 Minerva <= 2.0.21 build 238a (phpbb_root_path) File Include Vulnerability
SSV-16556 PBLang <= 4.66z (temppath) Remote File Include Vulnerability
SSV-16559 BrudaNews <= 1.1 (admin/index.php) Remote File Include Vulnerability
SSV-16550 ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability
SSV-16554 SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability
SSV-16552 Advaced-Clan-Script <= 3.4 (mcf.php) Remote File Include Vulnerability
SSV-16549 Web-News <= 1.6.3 (template.php) Remote File Include Vulnerability
SSV-16543 SolidState <= 0.4 Multiple Remote File Include Vulnerabilities
SSV-16542 ProgSys <= 0.156 (RR.php) Remote File Include Exploit
SSV-16539 pNews <= 1.1.0 (nbs) Remote File Include Vulnerability
SSV-16540 PHPartenaire 1.0 (dix.php3) Remote File Include Vulnerability
SSV-16541 phpQuestionnaire 3.12 (phpQRootDir) Remote File Include Vulnerability
SSV-16537 AllMyGuests <= 0.4.1 (cfg_serverpath) Remote File Include Vulnerability
SSV-16530 Simple Discussion Board 0.1.0 Remote File Include Vulnerability
SSV-16527 Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities
SSV-16526 Pie Cart Pro (Home_Path) Remote File Include Vulnerability
SSV-16525 Exponent CMS <= 0.96.3 (view) Remote Command Execution Exploit
SSV-16532 Digital WebShop <= 1.128 Multiple Remote File Include Vulnerabilities
SSV-16533 BCWB <= 0.99 (root_path) Remote File Include Vulnerability
SSV-16524 PNphpBB2 <= 1.2g (phpbb_root_path) Remote File Include Vulnerability
SSV-16517 MobilePublisherPHP <= 1.5 RC2 Remote File Include Vulnerability
SSV-16515 guanxiCRM Business Solution <= 0.9.1 Remote File Include Vulnerability
SSV-16511 aeDating <= 4.1 dir[inc] Remote File Include Vulnerabilities
SSV-16513 Mambo com_registration_detailed <= 4.1 Remote File Include
SSV-16514 UNAK-CMS <= 1.5 (dirroot) Remote File Include Vulnerabilities
SSV-16506 BolinOS <= 4.5.5 (gBRootPath) Remote File Include Vulnerability
SSV-16503 PhotoPost <= 4.6 (PP_PATH) Remote File Include Vulnerability
SSV-16507 PHP DocWriter <= 0.3 (script) Remote File Include Exploit
SSV-16509 Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
SSV-16508 Site@School <= 2.4.02 Advisory / Remote File Upload Exploit
SSV-16502 TeamCal Pro <= 2.8.001 (app_root) Remote file Include Vulnerability
SSV-16501 Mambo com_serverstat Component <= 0.4.4 File Include Vulnerability
SSV-16500 phpQuiz 0.1 (pagename) Remote File Include Vulnerability
SSV-16495 Shadowed Portal <= 5.599 (root) Remote File Include Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English