漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-14898 BIGACE CMS 2.6 (cmd) Local File Inclusion Vulnerability
SSV-14899 Jax FormMailer 3.0.0 Remote File Inclusion Vulnerability
SSV-11725 PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability
SSV-11726 WordPress Plugin DM Albums 1.9.2 Remote File Inclusion Vuln
SSV-14903 DM FileManager 3.9.4 Remote File Inclusion Vulnerability
SSV-11707 MyFusion 6b settings[locale] Local File Inclusion Vulnerability
SSV-11705 Mega File Manager 1.0 (index.php page) LFI Vulnerability
SSV-14927 LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability
SSV-14931 Glossword <= 1.8.11 (index.php x) Local File Inclusion Vulnerability
SSV-11695 phpCollegeExchange 0.1.5c (RFI/LFI/XSS) Multiple Vulnerabilities
SSV-14933 phpCollegeExchange 0.1.5c (RFI/LFI/XSS) Multiple Vulnerabilities
SSV-11686 Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities
SSV-11673 Php168 本地文件包含漏洞
SSV-11661 phpFK 7.03 (page_bottom.php) Local File Inclusion Vulnerability
SSV-14954 FretsWeb 1.2 Multiple Local File Inclusion Vulnerabilities
SSV-11636 Joomla Component com_Projectfork 2.0.10 Local File Inclusion Vuln
SSV-14955 fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
SSV-12953 Mundi Mail 0.8.2 (top) Remote File Inclusion Vulnerability
SSV-12949 DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability
SSV-11616 Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities
SSV-11617 WordPress Plugin FireStats <= 1.6.1(fs_javascript) RFI Vulnerability
SSV-11583 Joomla Component com_vehiclemanager 1.0 RFI Vulnerability
SSV-11575 S-CMS <= 2.0b3 Multiple Local File Inclusion Vulnerabilities
SSV-11570 Joomla Component BookLibrary 1.5.2.4 Remote File Include Vuln
SSV-11573 Joomla Component com_media_library 1.5.3 RFI Vulnerability
SSV-11584 School Data Navigator (page) Local/Remote File Inclusion Vulnerability
SSV-11580 Joomla Component com_realestatemanager 1.0 RFI Vulnerability
SSV-12918 phpWebThings <= 1.5.2 (help.php module) Local File Inclusion Vuln
SSV-12886 Joomla Component BookLibrary 1.5.2.4 Remote File Inclusion Vuln
SSV-11556 Joomla Component MooFAQ (com_moofaq) LFI Vulnerability
SSV-11543 Podcast Generator多个模块文件包含和任意文件删除漏洞
SSV-11518 Joomla Omilen Photo Gallery 0.5b Local File Inclusion Vulnerability
SSV-11505 AdaptBB 1.0 (forumspath) Remote File Inclusion Vulnerability
SSV-11471 SiteX <= 0.7.4.418 (THEME_FOLDER) Local File Inclusion Vulnerabilities
SSV-11470 Easy Px 41 CMS v09.00.00B1 (fiche) Local File Inclusion Vulnerability
SSV-11439 cpCommerce 1.2.x GLOBALS[prefix] Arbitrary File Inclusion Exploit
SSV-11455 Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit
SSV-11440 Wordpress Plugin Lytebox (wp-lytebox) Local File Inclusion Vulnerability
SSV-11441 Webradev Download Protect 1.0 Remote File Inclusion Vulnerabilities
SSV-11410 Cute Editor for ASP.NET vulnerability
SSV-11393 Coppermine Photo Gallery 'lang' Cookie参数本地文件包含漏洞
SSV-11339 Flyspeck CMS 6.8 Remote LFI / Change Add Admin Exploit
SSV-11341 Pluck 4.6.2 (langpref) Local File Inclusion Vulnerabilities
SSV-11344 DOURAN Portal <= 3.9.0.23 Multiple Remote Vulnerabilities
SSV-11267 Php Recommend <= 1.3 (AB/RFI/CI) Multiple Remote Vulnerabilities
SSV-11233 赛问(cyask)collect.php本地文件读取漏洞
SSV-11196 Qt quickteam Multiple Remote File Inclusion Vulnerabilities
SSV-11175 pecio cms 1.1.5 (index.php language) Local File Inclusion Vulnerability
SSV-5132 S-CMS version 1.1 suffers from a local file inclusion vulnerability in plugin.php
SSV-11110 Thickbox Gallery v2 (index.php ln) Local File Inclusion Vulnerability
SSV-11113 Flatchat 3.0 (pmscript.php with) Local File Inclusion Vulnerability
SSV-5117 TotalCalendar cms_detect.php模块本地文件包含漏洞
SSV-11107 Opencart 1.1.8 (route) Local File Inclusion Vulnerability
SSV-5114 NotFTP config.php本地文件包含漏洞
SSV-11086 WebPortal CMS 0.8b Multiple Remote/Local File Inclusion Vulnerabilities
SSV-11087 FOWLCMS 1.1 (AB/LFI/SU) Multiple Remote Vulnerabilities
SSV-11071 TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability
SSV-11070 FunGamez rc1 (AB/LFI) Multiple Remote Vulnerabilities
SSV-11040 SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities
SSV-11025 Job2C 4.2 (adtype) Local File Inclusion Vulnerability
SSV-11023 FreeWebshop.org 2.2.9 RC2 (lang_file) Local File Inclusion Vulnerability
SSV-17902 PHP-Revista 1.1.2 (RFI/SQLi/CB/XSS) Multiple Remote Vulnerabilities
SSV-11000 Yellow Duck Weblog 2.1.0 (lang) Local File Inclusion Vulnerability
SSV-10973 Redaxscript 0.2.0 (language) Local File Inclusion Vulnerability
SSV-10958 iDB 0.2.5pa SVN 243 (skin) Local File Inclusion Exploit
SSV-10946 ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln
SSV-10940 Koschtit Image Gallery 1.82 Multiple Local File Inclusion Vulnerabilities
SSV-10930 webEdition <= 6.0.0.4 (WE_LANGUAGE) Local File Inclusion Vulnerability
SSV-17886 Acute Control Panel 1.0.0 (SQL/RFI) Multiple Remote Vulnerabilities
SSV-4948 ECMall本地文件包含漏洞
SSV-10884 Jinzora Media Jukebox <= 2.8 (name) Local File Inclusion Vulnerability
SSV-10880 Pluck CMS 4.6.1 (module_pages_site.php post) LFI Exploit
SSV-4930 Horde产品本地文件包含和跨站脚本漏洞
SSV-10835 Mega File Hosting Script 1.2 (cross.php url) RFI Vulnerability
SSV-10814 YAP 1.1.1 (index.php page) Local File Inclusion Vulnerability
SSV-10794 CMS S.Builder <= 3.7 Remote File Inclusion Vulnerability
SSV-10803 WeBid <= 0.7.3 RC9 Multiple Remote File Inclusion Vulnerabilities
SSV-17877 Wili-CMS 0.4.0 (RFI/LFI/AB) Multiple Remote Vulnerabilities
SSV-17872 ghostscripter Amazon Shop (XSS/DT/RFI) Multiple Vulnerabilities
SSV-4857 eXtplorer include/init.php本地文件包含漏洞
SSV-17873 Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit
SSV-4849 视频播客SupeV 1.0.1 多个安全漏洞
SSV-10733 Golabi CMS Remote File Inclusion Vulnerability
SSV-10717 Free Arcade Script 1.0 LFI Command Execution Exploit
SSV-10702 phpBB 3 (autopost bot mod <= 0.1.3) Remote File Include Vulnerability
SSV-4768 GnuBoard 文件包含漏洞&远程代码执行漏洞
SSV-4766 4Images 1.7.6 Local Inclusion Vulnerability
SSV-10627 Papoo CMS 3.x (pfadhier) Local File Inclusion Vulnerability
SSV-10604 Potato News 1.0.0 (user) Local File Inclusion Vulnerability
SSV-10591 AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities
SSV-10597 WB News 2.1.1 config[installdir] Remote File Inclusion Vulnerability
SSV-10592 SnippetMaster Webpage Editor 2,2,2 (RFI/XSS) Multiple Vulnerabilities
SSV-10596 webframe 0.76 Multiple File Inclusion Vulnerabilities
SSV-10595 Yet Another NOCC <= 0.1.0 Local File Inclusion Vulnerability
SSV-10581 phpYabs 0.1.2 (Azione) Remote File Inclusion Vulnerability
SSV-17844 SnippetMaster Webpage Editor 2 2 2 (RFI/XSS) Multiple Vulnerabilities
SSV-17842 Traidnt UP Version 1.0 Remote File Upload Vulnerability
SSV-17841 SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities
SSV-10566 phpList <= 2.10.8 Local File Inclusion Vulnerability
SSV-10565 PHPbbBook 1.3 (bbcode.php l) Local File Inclusion Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English