漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-8808 phpDMCA 1.0.0 Multiple Remote File Inclusion Vulnerabilities
SSV-8807 CMS Mini 0.2.2 Multiple Local File Inclusion Vulnerabilities
SSV-17298 cmsWorks 2.2 RC4 (fckeditor) Remote Arbitrary File Upload Exploit
SSV-8812 MiGCMS 2.0.5 Multiple Remote File Inclusion Vulnerabilities
SSV-8795 Aprox CMS Engine v5(.1.0.4) Local File Inclusion Vulnerability
SSV-17292 Hedgehog-CMS 1.21 (header.php) Local File Inclusion Vulnerability
SSV-8782 FireAnt 1.3 (index.php page) Local File Inclusion Vulnerability
SSV-8787 Jamroom 3.3.5 Remote File Inclusion Vulnerabilities
SSV-8783 FubarForum 1.5 (index.php page) Local File Inclusion Vulnerability
SSV-8785 IPTBB 0.5.6 (index.php act) Local File Inclusion Vulnerability
SSV-8777 Lotus Core CMS 1.0.1 Remote File Inclusion Vulnerabilities
SSV-8775 Orlando CMS 0.6 Remote File Inclusion Vulnerabilities
SSV-8757 WebCalendar 1.0.4 (includedir) Remote File Inclusion Vulnerability
SSV-8747 Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability
SSV-8739 Devalcms 1.4a (currentfile) Local File Inclusion Vulnerability
SSV-8733 Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability
SSV-8735 Contenido 4.8.4 (RFI/XSS) Multiple Remote Vulnerabilities
SSV-8719 Facil-CMS 0.1RC Multiple Local File Inclusion Vulnerabilities
SSV-8726 Easy-Clanpage 3.0b1 (section) Local File Inclusion Vulnerability
SSV-8700 ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerabilities
SSV-8709 TNT Forum 0.9.4 Local File Inclusion Vulnerabilities
SSV-8711 FOG Forum 0.8.1 Multiple Local File Inclusion Vulnerabilities
SSV-8686 BrowserCRM 5.002.00 (clients.php) Remote File Inclusion Vulnerability
SSV-8687 Galatolo Web Manager 1.0 XSS / Local File Inclusion Vulnerability
SSV-8689 ProManager 0.73 (config.php) Local File Inclusion Vulnerability
SSV-3369 CMSimple文件上传及本地文件包含漏洞
SSV-8553 Booby 1.0.1 Multiple Remote File Inclusion Vulnerabilities
SSV-8547 DesktopOnNet 3 Beta Multiple Remote File Inclusion Vulnerabilities
SSV-8535 PassWiki <= 0.9.16 RC3 (site_id) Local File Inclusion Vulnerability
SSV-8530 CMSimple 3.1 Local File Inclusion / Arbitrary File Upload Exploit
SSV-8538 Social Site Generator (path) Remote File Inclusion Vulnerability
SSV-8518 PicoFlat CMS 0.5.9 Local File Inclusion Vulnerabilitty (win)
SSV-3333 OneCMS load参数本地文件包含漏洞
SSV-8512 OtomiGen.X 2.2 (lang) Local File Inclusion Vulnerabilities
SSV-8503 plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability
SSV-8504 Xomol CMS v1 Login Bypass / LFI Vulnerabilities
SSV-17254 Xomol CMS <= 1.2 Login Bypass / LFI Vulnerabilities
SSV-8501 OneCMS 2.5 (install_mod.php) Local File Inclusion Vulnerability
SSV-8500 Quate CMS 0.3.4 RD Remote Vulnerabilities
SSV-17253 phpRaider 1.0.7 (phpbb3.functions.php) RFI Vulnerability
SSV-8491 EntertainmentScript 1.4.0 (page.php page) Local File Inclusion Exploit
SSV-8487 microSSys CMS <= 1.5 Remote File Inclusion Vulnerability
SSV-8483 GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability
SSV-8479 Ajax framework (lang) Local File Inclusion Vulnerability
SSV-8476 Smeego 1.0 (Cookie lang) Local File Inclusion Exploit
SSV-8450 BIGACE 2.4 Multiple Remote File Inclusion Vulnerabilities
SSV-17247 Rgboard <= 3.0.12 (RFI/XSS) Multiple Remote Vulnerabilities
SSV-17248 Kostenloses Linkmanagementscript (page_to_include) RFI Vulnerability
SSV-8430 PhpBlock a8.5 Multiple Remote File Inclusion Vulnerabilities
SSV-8422 txtCMS 0.3 (index.php) Local File Inclusion Exploit
SSV-8413 SazCart 1.5.1 Multiple Remote File Inclusion Vulnerabilities
SSV-8412 Cyberfolio 7.12 (rep) Remote File Inclusion Vulnerability
SSV-3269 rgboard 3.0.12 远程文件包含漏洞
SSV-8403 Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability
SSV-17232 CMS Faethon 2.2 Ultimate (RFI/XSS) Multiple Remote Vulnerabilies
SSV-8411 Kmita Tellfriend <= 2.0 (file) Remote File Inclusion Vulnerability
SSV-8398 ScorpNews 1.0 (example.php site) Remote File Inclusion Vulnerability
SSV-8391 interact 2.4.1 Multiple Remote File Inclusion Vulnerabilities
SSV-8392 Harris WapChat v.1 Multiple Remote File Inclusion Vulnerabilities
SSV-8389 ActualAnalyzer Lite (free) 2.78 Local File Inclusion Vulnerability
SSV-17213 Content Management System for Phprojekt 0.6.1 RFI Vulnerabiltiies
SSV-17210 Joomla Component Joomla-Visites 1.1 RC2 RFI Vulnerability
SSV-8358 Kubelance 1.6.4 (ipn.php i) Local File Inclusion Vulnerability
SSV-8352 Aterr 0.9.1 (class) Local File Inclusion Vulnerabilities (php5)
SSV-8341 Grape Statistics 0.2a (location) Remote File Inclusion Vulnerability
SSV-8337 e107 Module 123 Flash Chat 6.8.0 Remote File Inclusion Vulnerability
SSV-8310 NewsOffice 1.1 Remote File Inclusion Vulnerability
SSV-8305 Ksemail (index.php language) Local File Inclusion Vulnerability
SSV-8299 phpBB Add-on Fishing Cat Portal Remote File Inclusion Exploit
SSV-17199 ExBB <= 0.22 (LFI/RFI) Multiple Remote Vulnerabilities
SSV-8285 Dragoon 0.1 (root) Remote File Inclusion Vulnerability
SSV-8247 Blogator-script 0.95 (incl_page) Remote File Inclusion Vulnerability
SSV-8255 Dragoon 0.1 (lng) Local File Inclusion Vulnerability
SSV-8241 DaZPHP 0.1 (prefixdir) Local File Inclusion Vulnerability
SSV-8240 Joomla Component OnlineFlashQuiz <= 1.0.2 RFI Vulnerability
SSV-8244 PhpBlock a8.4 (PATH_TO_CODE) Remote File Inclusion Vulnerability
SSV-8225 mxBB Module mx_blogs 2.0.0-beta Remote File Inclusion Exploit
SSV-8220 JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities
SSV-8210 phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability
SSV-8205 PowerBook 1.21 (index.php page) Local File Inclusion Vulnerability
SSV-8209 PowerPHPBoard 1.00b Multiple Local File Inclusion Vulnerabilities
SSV-3079 PHPauction 'include_path'远程文件包含漏洞
SSV-8203 Cuteflow Bin 1.5.0 (login.php) Local File Inclusion Vulnerability
SSV-8201 Joomla Components custompages 1.1 Remote File Inclusion Vulnerability
SSV-8196 phpAddressBook 2.11 Multiple Local File Inclusion Vulnerabilities
SSV-3049 ShopEx PHP远程包含漏洞
SSV-7937 Exero CMS 1.0.1 (theme) Multiple Local File Inclusion Vulnerabilities
SSV-7938 PHPauction GPL Enhanced 2.51 Multiple RFI Vulnerabilities
SSV-8001 fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability
SSV-2991 Joomla! 1.0.15 RC4之前版本多个远程漏洞
SSV-2984 GROUP-E head_auth.php远程文件包含漏洞
SSV-2979 GROUP-E 'head_auth.php'远程文件包含漏洞
SSV-2977 SiteBuilder Elite 'CarpPath'远程文件包含漏洞
SSV-2978 Barryvan Compo Manager 'main.php'远程文件包含漏洞
SSV-8186 Barryvan Compo Manager 0.5pre-1 Remote File Inclusion Vulnerability
SSV-8184 SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities
SSV-8175 Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities
SSV-8174 DBHcms <= 1.1.4 Remote File Inclusion exploit
SSV-8180 Thecus N5200Pro NAS Server Control Panel RFI Vulnerability
SSV-8178 GROUP-E 1.6.41 (head_auth.php) Remote File Inclusion Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English