漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-10551 Groone GLinks 2.1 Remote File Inclusion Vulnerability
SSV-10561 Jaws 0.8.8 Multiple Local File Inclusion Vulnerabilities
SSV-10555 Technote 7.2 Remote File Inclusion Vulnerability
SSV-10565 PHPbbBook 1.3 (bbcode.php l) Local File Inclusion Exploit
SSV-10564 GRBoard 1.8 Multiple Remote File Inclusion Vulnerabilities
SSV-17812 SMA-DB 0.3.12 (RFI/XSS) Multiple Remote Vulnerabilities
SSV-10536 phplist 2.10.x (RCE by environ inclusion) Local File Inclusion Exploit
SSV-10489 GNUBoard 4.31.03 (08.12.29) Local File Inclusion Vulnerability
SSV-10483 Php Photo Album 0.8b (index.php preview) Local File Inclusion Vulnerability
SSV-10462 Realtor 747 (define.php INC_DIR) Remote File Inclusion Vulnerability
SSV-10452 Photobase 1.2 (language) Local File Inclusion Vulnerability
SSV-10412 playSMS 0.9.3 Multiple Remote/Local File Inclusion Vulnerabilities
SSV-10391 PNphpBB2 <= 1.2i (ModName) Multiple LFI Vulnerabilities
SSV-10399 Cybershade CMS 0.2b (index.php) Remote File Inclusion Exploit
SSV-10378 phpSkelSite 1.4 (RFI/LFI/XSS) Multiple Remote Vulnerabilities
SSV-10351 eDContainer v2.22 (lg) Local File Inclusion Vulnerability
SSV-10331 ClaSS <= 0.8.60 (export.php ftype) Local File Inclusion Vulnerability
SSV-10332 BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability
SSV-10282 MyPHPsite (index.php mod) Local File Inclusion Vulnerability
SSV-17639 WorkSimple 1.2.1 RFI / Sensitive Data Disclosure Vulnerabilities
SSV-10253 CFAGCMS v1 Remote File Inclusion Vulnerabilities
SSV-10242 Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities
SSV-10246 AutositePHP 2.0.3 (LFI/CSRF/Edit File) Multiple Remote Vulnerabilities
SSV-10228 phpAddEdit 1.3 (editform) Local File Inclusion Vulnerability
SSV-10213 PHPmyGallery 1.0beta2 (RFI/LFI) Multiple Remote Vulnerabilities
SSV-10201 XOOPS 2.3.1 Multiple Local File Inclusion Vulnerabilities
SSV-10207 WebCAF <= 1.4 (LFI/RCE) Multiple Remote Vulnerabilities
SSV-17597 PHPmyGallery 1.5beta (common-tpl-vars.php) LFI/RFI Vulnerabilities
SSV-10175 phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability
SSV-10187 Mini-CMS 1.0.1 (index.php) Multiple Local File Inclusion Vulnerabilities
SSV-10186 Mini Blog 1.0.1 (index.php) Multiple Local File Inclusion Vulnerabilities
SSV-10169 lcxbbportal 0.1 Alpha 2 Remote File Inclusion Vulnerability
SSV-10172 Gravity GTD <= 0.4.5 (rpc.php objectname) LFI/RCE Vulnerability
SSV-10170 My Simple Forum 3.0 (index.php action) Local File Inclusion Vulnerability
SSV-10173 BNCwi <= 1.04 Local File Inclusion Vulnerability
SSV-10166 Multi SEO phpBB 1.1.0 (pfad) Remote File Inclusion Vulnerability
SSV-10141 CMS Made Simple 1.4.1 Local File Inclusion Vulnerability
SSV-10120 PageTree CMS 0.0.2 BETA 0001 Remote File Inclusion Vulnerability
SSV-10111 TxtBlog (index.php m) Local File Inclusion Vulnerability
SSV-10103 fuzzylime cms 3.03 (track.php p) Local File Inclusion Vulnerability
SSV-10101 Pie Web M{a,e}sher Mod Rss 0.1 Remote File Inclusion Vulnerability
SSV-10088 Pie Web M{a,e}sher 0.5.3 Multiple Remote File Inclusion Vulnerability
SSV-17532 MODx CMS <= 0.9.6.2 (RFI/XSS) Multiple Remote Vulnerabilities
SSV-17534 PHP Classifieds Script Remote Database Disclosure Vulnerability
SSV-17533 Goople Cms 1.7 Insecure Cookie Handling Vulnerability
SSV-4472 Pluck g_pcltar_lib_dir参数本地文件包含漏洞
SSV-17512 Alex Article-Engine 1.3.0 (fckeditor) Arbitrary File Upload Vulnerability
SSV-17511 Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability
SSV-10060 Free Directory Script 1.1.1 (API_HOME_DIR) RFI Vulnerability
SSV-17513 PunBB (Private Messaging System 1.2.x) Multiple LFI Exploit
SSV-10059 Pluck CMS 4.5.3 (g_pcltar_lib_dir) Local File Inclusion Vulnerability
SSV-10051 phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability
SSV-10020 Joomla Component Simple RSS Reader 1.0 RFI Vulnerability
SSV-4435 Enthusiast show_joined.php远程文件包含漏洞
SSV-10000 OTManager CMS 2.4 (Tipo) Remote File Inclusion Vulnerability
SSV-9992 Cyberfolio <= 7.12.2 (css.php theme) Local File Inclusion Vulnerability
SSV-9987 Enthusiast 3.1.4 (show_joined.php path) Remote File Inclusion Vuln
SSV-9964 e-Vision CMS <= 2.0.2 Multiple Local File Inclusion Exploit
SSV-17488 Joomla Component Feederator 1.0.5 Multiple RFI Vulnerabilities
SSV-17487 Joomla Component Recly!Competitions 1.0.0 Multiple RFI Vulnerabilities
SSV-17486 Joomla Component Clickheat 1.0.1 Multiple RFI Vulnerabilities
SSV-9949 Joomla Component Dada Mail Manager 2.6 RFI Vulnerability
SSV-9928 TBmnetCMS 1.0 (index.php content) Local File Inclusion Vulnerability
SSV-9931 Joomla Component ongumatimesheet20 4b RFI Vulnerability
SSV-9930 Joomla Component VirtueMart Google Base 1.1 RFI Vulnerability
SSV-9935 Joomla Component ProDesk 1.0/1.2 Local File Inclusion Vulnerability
SSV-9934 nicLOR Puglia Landscape (id) Local File Inclusion Vulnerability
SSV-9940 nicLOR Sito includefile Local File Inclusion Vulnerabilities
SSV-9899 Joomla Component Flash Tree Gallery 1.0 RFI Vulnerability
SSV-9865 Tribiq CMS 5.0.10a Local File Inclusion Vulnerability (win)
SSV-9890 ModernBill <= 4.4.x XSS / Remote File Inclusion Vulnerability
SSV-9864 Cybershade CMS 0.2b Remote File Inclusion Vulnerability
SSV-9872 cpanel 11.x XSS / Local File Inclusion Vulnerability
SSV-9833 Agares ThemeSiteScript 1.0 (loadadminpage) RFI Vulnerability
SSV-9819 MyForum 1.3 (padmin) Local File Inclusion Vulnerability
SSV-9823 MyKtools 2.4 (langage) Local File Inclusion Vulnerability
SSV-4334 phpMyAdmin Theme变量本地文件包含漏洞
SSV-9782 txtshop 1.0b (language) Local File Inclusion Vulnerability (win only)
SSV-9776 phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability
SSV-9783 Joomla Component RWCards 3.0.11 Local File Inclusion Vulnerability
SSV-9773 LightBlog 9.8 (GET,POST,COOKIE) Multiple LFI Vulnerabilities
SSV-9762 yappa-ng <= 2.3.3-beta0 (album) Local File Inclusion Vulnerability
SSV-9745 Post Affiliate Pro 2.0 (index.php md) Local File Inclusion Vulnerability
SSV-9740 Kure 0.6.3 (index.php post,doc) Local File Inclusion Vulnerability
SSV-9725 SezHoo 0.1 (IP) Remote File Inclusion Vulnerability
SSV-9717 LokiCMS 0.3.4 (admin.php) Create Local File Inclusion Exploit
SSV-9695 WebBiscuits Modules Controller <= 1.1 (RFI/RFD) Remote Vulnerabilities
SSV-17405 DFF PHP Framework API (Data Feed File) RFI Vulnerabilities
SSV-9689 asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities
SSV-4147 phpCMS 1.2.x任意文件包含漏洞
SSV-9673 pPIM 1.01 (notes.php id) Local File Inclusion Vulnerability
SSV-9674 JMweb Multiple (src) Local File Inclusion Vulnerabilities
SSV-9659 OLIB 7 WebView 2.5.1.1 (infile) Local File Inclusion Vulnerability
SSV-9651 Crux Gallery <= 1.32 (index.php theme) Local File Inclusion Vulnerability
SSV-9653 RPortal 1.1 (file_op) Remote File Inclusion Vulnerability
SSV-9638 MiNBank 1.5.0 Multiple Remote File Inclusion Vulnerability
SSV-9627 Events Calendar 1.1 Remote File Inclusion Vulnerability
SSV-9607 PlugSpace 0.1 (index.php navi) Local File Inclusion Vulnerability
SSV-9599 X7 Chat <= 2.0.1A1 (mini.php help_file) Local File Inclusion Vulnerability
SSV-9604 CoAST 0.95 (sections_file) Remote File Inclusion Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English