漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-16258 Ottoman CMS <= 1.1.3 (default_path) Remote File Inclusion Exploit
SSV-16256 Sabdrimer PRO <= 2.2.4 (pluginpath) Remote File Include Vulnerability
SSV-16250 MyPHP CMS <= 0.3 (domain) Remote File Include Vulnerability
SSV-16249 WonderEdit Pro CMS (template_path) Remote File Include Vulnerabilities
SSV-16248 galleria Mambo Module <= 1.0b Remote File Include Vulnerability
SSV-16240 Randshop <= 1.1.1 (header.inc.php) Remote File Include Vulnerability
SSV-16241 Opera Web Browser 9.00 (iframe) Remote Denial of Service Exploit
SSV-16239 Plume CMS 1.1.3 (dbinstall.php) Remote File Include Vulnerability
SSV-16238 Stud.IP <= 1.3.0-2 Multiple Remote File Include Vulnerabilities
SSV-16243 SmartSiteCMS 1.0 (root) Multiple Remote File Inclusion Vulnerabilities
SSV-16242 Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
SSV-16235 GeekLog <= 1.4.0sr3 (_CONF[path]) Remote File Include Vulnerabilities
SSV-16231 RsGallery2 <= 1.11.2 (rsgallery.html.php) File Include Vulnerability
SSV-16229 Pearl For Mambo <= 1.6 Multiple Remote File Include Vulnerabilities
SSV-16228 CBSMS Mambo Module <= 1.0 Remote File Include Vulnerability
SSV-16226 DeluxeBB <= 1.07 (cp.php) Create Admin Exploit
SSV-16224 MagNet BeeHive CMS (header) Remote File Include Vulnerability
SSV-16227 DreamAccount <= 3.1 (auth.api.php) Remote File Include Exploit
SSV-16225 THoRCMS <= 1.3.1 (phpbb_root_path) Remote File Include Vulnerability
SSV-16221 phpMySms 2.0 (ROOT_PATH) Remote File Include Vulnerability
SSV-16217 Harpia CMS <= 1.0.5 Remote File Include Vulnerabilities
SSV-16218 w-Agora <= 4.2.0 (inc_dir) Remote File Include Exploit
SSV-16209 BandSite CMS <= 1.1.1 (root_path) Remote File Include Vulnerabilities
SSV-16210 dotProject <= 2.0.3 (baseDir) Remote File Inclusion Vulnerability
SSV-16205 Micro CMS <= 0.3.5 (microcms_path) Remote File Include Vulnerability
SSV-16204 IdeaBox <= 1.1 (gorumDir) Remote File Include Vulnerability
SSV-16202 INDEXU <= 5.0.1 (admin_template_path) Remote Include Vulnerabilities
SSV-16203 PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability
SSV-16199 FlashBB <= 1.1.8 (phpbb_root_path) Remote File Include Exploit
SSV-16201 Ad Manager Pro 2.6 (ipath) Remote File Include Vulnerability
SSV-16195 DeluxeBB <= 1.06 (templatefolder) Remote File Include Vulnerabilities
SSV-16192 The Bible Portal Project <= 2.12 (destination) File Include Vulnerability
SSV-16194 Content-Builder (CMS) <= 0.7.2 Multiple Include Vulnerabilities
SSV-16193 Php Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability
SSV-16190 Minerva <= 2.0.8a Build 237 (phpbb_root_path) File Include Vulnerability
SSV-16189 aWebNews <= 1.5 (visview.php) Remote File Include Vulnerability
SSV-16188 DCP-Portal 6.1.x (root) Remote File Include Vulnerability
SSV-16186 Content-Builder (CMS) 0.7.5 Multiple Include Vulnerabilities
SSV-16182 free QBoard <= 1.1 (qb_path) Remote File Include Vulnerability
SSV-16185 AWF CMS 1.11 (spaw_root) Remote File Include Vulnerability
SSV-16181 WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability
SSV-16180 phpOnDirectory <= 1.0 Remote File Include Vulnerabilities
SSV-16171 Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability
SSV-16172 D-Link Access-Point <= 2.10na (DWL Series) Config Disclosure Vuln
SSV-16173 cms-bandits 2.5 (spaw_root) Remote File Include Vulnerabilities
SSV-16174 Enterprise Payroll Systems <= 1.1 (footer) Remote Include Vulnerability
SSV-16170 Xtreme/Ditto News <= 1.0 (post.php) Remote File Include Vulnerability
SSV-16169 OpenEMR <= 2.8.1 (fileroot) Remote File Include Vulnerability
SSV-16168 myNewsletter <= 1.1.2 (adminLogin.asp) Login Bypass Exploit
SSV-16167 Wikiwig <= 4.1 (wk_lang.php) Remote File Include Vulnerability
SSV-16166 Dmx Forum <= 2.1a (edit.php) Remote Password Disclosure Exploit
SSV-16164 dotWidget CMS <= 1.0.6 (file_path) Remote File Include Vulnerabilities
SSV-16165 DreamAccount <= 3.1 (da_path) Remote File Include Vulnerabilities
SSV-16155 BlueShoes Framework <= 4.6 Remote File Include Vulnerabilities
SSV-16157 CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability
SSV-16153 Pixelpost <= 1-5rc1-2 Remote Privilege Escalation Exploit
SSV-16156 WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability
SSV-16154 DotClear <= 1.2.4 (prepend.php) Arbitrary Remote Inclusion Exploit
SSV-16151 Informium 0.12.0 (common-menu.php) Remote File Include Vulnerabilities
SSV-16148 iShopCart vGetPost() Remote Buffer Overflow Exploit (cgi)
SSV-16152 PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions
SSV-16149 Igloo <= 0.1.9 (Wiki.php) Remote File Include Vulnerability
SSV-16150 ashNews 0.83 (pathtoashnews) Remote File Include Vulnerabilities
SSV-16147 Redaxo CMS <= 3.2 (INCLUDE_PATH) Remote File Include Vulnerabilities
SSV-16144 AssoCIateD CMS 1.1.3 (root_path) Remote File Include Vulnerability
SSV-16146 Bytehoard 2.1 (server.php) Remote File Include Vulnerability
SSV-16141 Ottoman CMS <= 1.1.3 (default_path) Remote File Include Vulnerabilities
SSV-16142 metajour 2.1 (system_path) Remote File Include Vulnerabilities
SSV-16138 gnopaste <= 0.5.3 (common.php) Remote File Include Vulnerability
SSV-16120 Plume CMS <= 1.0.3 (manager_path) Remote File Include Vulnerability
SSV-16117 DoceboLMS <= 2.0.5 (help.php) Remote File Include Vulnerability
SSV-16114 Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
SSV-16118 APC ActionApps CMS 2.8.1 Remote File Include Vulnerabilities
SSV-16115 Socketmail <= 2.2.6 (site_path) Remote File Include Vulnerability
SSV-16116 V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
SSV-16113 open-medium.CMS <= 0.25 (404.php) Remote File Include Vulnerability
SSV-16107 Docebo <= 3.0.3 Multiple Remote File Include Vulnerabilities
SSV-16099 CaLogic Calendars 1.2.2 (CLPath) Remote File Include Vulnerabilities
SSV-16077 phpBB <= 2.0.20 (Admin/Restore DB/default_lang) Remote Exploit
SSV-16076 Php Blue Dragon CMS <= 2.9 Remote File Include Vulnerability
SSV-16069 ActualAnalyzer Pro <= 6.88 (rf) Remote File Include Exploit
SSV-16068 ActualAnalyzer Server <= 8.23 (rf) Remote File Include Vulnerability
SSV-16066 Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit
SSV-16067 Claroline e-Learning 1.75 (ldap.inc.php) Remote File Inclusion Exploit
SSV-16070 phpListPro <= 2.01 Multiple Remote File Include Vulnerabilities
SSV-16055 TotalCalendar <= 2.30 (inc) Remote File Include Vulnerability
SSV-16049 Auction <= 1.3m (phpbb_root_path) Remote File Include Exploit
SSV-16002 MyEvent <= 1.3 (myevent_path) Remote File Inclusion Vulnerability
SSV-15960 PHPNuke-Clan 3.0.1 (vwar_root2) Remote File Inclusion Exploit
SSV-15945 CuteNews <= 1.4.1 (function.php) Local File Include Exploit
SSV-15498 PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability
SSV-15424 e107 include() Remote Exploit
SSV-15240 phpBB 2.0.4 Remote php File Include Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English