漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-18610 FestOs <= 2.2.1 Multiple RFI Exploit
SSV-18620 Ptag <= 4.0.0 Multiple RFI Exploit
SSV-18623 Linux - setreuid (0 0) & execve(/bin/rm /etc/shadow)
SSV-18622 SaurusCMS <= 4.6.4 Multiple RFI Exploit
SSV-18599 gpEasy <= 1.5RC3 Remote FIle Include Exploit
SSV-15075 Loggix Project <= 9.4.5 Multiple Remote File Inclusion
SSV-18496 Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability
SSV-18497 eoCMS <= 0.9.03 Remote FIle Include Vulnerability
SSV-15055 Mamboleto Joomla! component Remote File Include Vulneralbility
SSV-18454 Joomla! Mamboleto Component 2.0 RC3 Remote File Include Vulneralbility
SSV-18431 SiSplet CMS <= 2008-01-24 Multiple Remote File Include Exploit
SSV-18439 MarieCMS v0.9 LFI RFI and XSS Vulnerabilities
SSV-18440 TANDBERG vF8.2 F8.0 F7.2 and F6.3 Remote Denial of Service
SSV-18421 AROUNDMe <= 1.1 (language_path) Remote File Include Exploit
SSV-15030 Invision Power Board Local File Include Vulnerabilities
SSV-18367 Thatware <= 0.5.3 Multiple Remote File Include Exploit
SSV-18377 SAPID SHOP <= 1.3 Remote File Include Vulnerability
SSV-18364 Simple Machines Forum Multiple Security Vulnerabilities
SSV-18363 Joomla MojoBlog Component v0.15 Multiple Remote File Include Vulnerabilities
SSV-18360 Quate CMS <= 0.3.5 (RFI/LFI) Multiple Remote Vulnerabilities
SSV-18374 Public Media Manager <= 1.3 (forms_dir) Remote File Include Vulnerability
SSV-18346 SweetRice <= 0.5.3 Remote File Include Vulnerability
SSV-18375 OpenCSP Multiple Remote File Include Vulnerability
SSV-18378 Power BB 1.8.3 Remote File Includes
SSV-14979 PHP Live! Support v3.1 Multiple Remote File Include
SSV-12661 Joomla / Mambo Component com_ezine Remote File Include vulnerability
SSV-12658 Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities
SSV-12621 Bitrix Site Manager Multiple Remote File Include Vulnerability
SSV-14387 Article Directory Index.PHP Remote File Include Vulnerability
SSV-12585 Deliveryscript Multiple Remote File include vulnerability
SSV-14435 Endonesia CMS 8.4 local file inclusion
SSV-14419 Oscailt CMS 3.3 Local File Inclusion
SSV-12507 Joomla Component com_booklibrary v1.0
SSV-12508 Joomla Component com_ajaxchat 1.0 Remote File Include
SSV-12506 Joomla JD-WordPress Vulnerability File Inclusion Version 2.0 RC2
SSV-18274 Joomla / Mambo Component com_ezine v2.1 Remote File Include Vulnerability
SSV-14430 Joomla Ajax Chat 1.0 remote file inclusion
SSV-12449 A-Blog menu.php navigation_start Parameter Remote File Inclusion
SSV-14362 Dazzle Blast Remote File Inclusion
SSV-12443 QuickCart Multiple vlunerabilities
SSV-14358 QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal
SSV-12423 PHP168后台查看/修改任意文件漏洞
SSV-14493 FlatPress 0.804 - 0.812.1 local file inclusion vulnerability
SSV-14486 FSphp 0.2.1 Remote File Inclusion
SSV-12376 Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities
SSV-14468 Joomla GroupJive 1.8 B4 Remote File Inclusion
SSV-14469 Achievo 1.3.4 Remote File Inclusion
SSV-12378 ProdLer <= 2.0 (prodler.class.php sPath) RFI Vulnerability
SSV-12362 ClearSite 4.50 (cs_base_path) Remote File Inclusion Vulnerability
SSV-12359 FSphp 0.2.1 Multiple Remote File Inclusion Vulnerabilities
SSV-18297 Loggix Project <= 9.4.5 Multiple Remote File Include Vulnerability
SSV-18296 ProdLer <= 2.0 Remote File Include Vulnerability
SSV-12352 Mambo Component com_koesubmit 1.0.0 RFI Vulnerability
SSV-18286 Network Management/Inventory System [header.php] Remote File Include
SSV-12342 OpenSiteAdmin 0.9.7b (pageHeader.php path) RFI Vulnerability
SSV-14501 phpPollScript <= 1.3 (include_class) Remote File Inclusion Vulnerability
SSV-14510 efront <= 3.5.4 (database.php path) Remote File Inclusion Vulnerability
SSV-12296 Drunken:Golem Gaming Portal (admin_news_bot.php) RFI Vulnerability
SSV-14517 Aurora CMS 1.0.2 (install.plugin.php) Remote File Inclusion Vulnerability
SSV-14540 Advanced Comment System 1.0 Multiple RFI Vulnerabilities
SSV-14542 phpNagios 1.2.0 (menu.php) Local File Inclusion Vulnerability
SSV-14550 OBOphiX <= 2.7.0 (fonctions_racine.php) Remote File Inclusion Vuln
SSV-12209 Zentrack index.php远程文件包含漏洞
SSV-12201 PHPList远程文件包含漏洞
SSV-12200 MediaWiki 'IP'参数远程文件包含漏洞
SSV-14559 FreeSchool <= 1.1.0 Multiple Remote File Inclusion Vulnerabilities
SSV-14558 PHPope <= 1.0.0 Multiple Remote File Inclusion Vulnerabilities
SSV-14561 Ve-EDIT 0.1.4 (highlighter) Remote File Inclusion Vulnerability
SSV-12183 DataLife Engine 8.2 dle_config_api Remote File Inclusion Vulnerability
SSV-12181 Kingcms 0.6.0 (menu.php) Remote File Inclusion Vulnerability
SSV-14567 Ve-EDIT 0.1.4 (debug_php.php) Local File Inclusion Vulnerability
SSV-12142 Moa Gallery <= 1.2.0 Multiple Remote File Inclusion Vulnerabilities
SSV-14585 phpSANE 0.5.0 (save.php) Remote File Inclusion Vulnerability
SSV-14633 Autonomous LAN party <= 0.98.3 Remote File Inclusion Vulnerability
SSV-14644 PHP-Lance 1.52 Multiple Local File Inclusion Vulnerabilities
SSV-14674 Facil Helpdesk (RFI/LFI/XSS) Multiples Remote Vulnerabilities
SSV-14673 IsolSoft Support Center 2.5 (RFI/LFI/XSS) Multiples Vulnerabilities
SSV-11994 MyBackup 1.4.0 (AFD/RFI) Multiple Remote Vulnerabilities
SSV-11977 elgg <= 1.5 (/_css/js.php) Local File Inclusion Vulnerability
SSV-11979 In-Portal 4.3.1 (index.php env) Local File Inclusion Vulnerability
SSV-11968 ProjectButler 1.5.0 (pda_projects.php offset) RFI Vulnerability
SSV-11970 Arab Portal <= 2.2 (mod.php module) Local File Inclusion Vulnerability
SSV-14714 Netpet CMS 1.9 (confirm.php language) Local File Inclusion Vulnerability
SSV-14723 MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities
SSV-11956 PunBB Reputation.php Mod <= 2.0.4 Local File Inclusion Exploit
SSV-14733 justVisual 1.2 (fs_jVroot) Remote File Inclusion Vulnerabilities
SSV-14728 Really Simple CMS 0.3a (pagecontent.php PT) Local File Inclusion Vulnerability
SSV-14727 MUJE CMS 1.0.4.34 Local File Inclusion Vulnerabilities
SSV-14731 dit.cms 1.3 (path/sitemap/relPath) Local File Inclusion Vulnerabilities
SSV-11932 Ultrize TimeSheet 1.2.2 Remote File Inclusion Vulnerability
SSV-11906 SerWeb <= 2.1.0-dev1 2009-07-02 Multiple RFI Vulnerabilities
SSV-14768 SkaDate Dating (RFI/LFI/XSS) Multiple Remote Vulnerabilities
SSV-14760 PHP Paid 4 Mail Script (home.php page) Remote File Inclusion Vuln
SSV-14787 AWCM 2.1 Local File Inclusion / Auth Bypass Vulnerabilities
SSV-14801 MiniCWB 2.3.0 (LANG) Remote File Inclusion Vulnerabilities
SSV-14816 Super Simple Blog Script 2.5.4 Local File Inclusion Vulnerability
SSV-14828 Greenwood Content Manager 0.3.2 Local File Inclusion Exploit
SSV-14829 PHPGenealogy 2.0 (DataDirectory) RFI Vulnerability
SSV-14849 LionWiki (index.php page) Local File Inclusion Vulnerability
SSV-14868 ClearContent (image.php url) RFI/LFI Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English