漏洞分类 — 远程文件包含

英文名字
Remote File Inclusion
漏洞详情：
远程文件包含，简称 RFI，指服务利用程序文件包含函数包含远程文件，过滤不严导致可以包含服务器外的文件而导致问题产生。

相关漏洞

SSV ID 漏洞名称
SSV-8157 php Download Manager <= 1.1 Local File Inclusion Vulnerability
SSV-8160 phpUserBase 1.3b (unverified.inc.php) Remote File Inclusion Vulnerability
SSV-8165 phpProfiles 4.5.2 BETA (body_comm.inc.php) RFI Vulnerability
SSV-8158 Portail Web Php <= 2.5.1.1 Multiple Inclusion Vulnerabilities
SSV-8161 phpUserBase 1.3b (unverified.inc.php) Local File Inclusion Vulnerability
SSV-8164 Quinsonnas Mail Checker 1.55 (footer.php) RFI Vulnerability
SSV-8155 phpQLAdmin 2.2.7 Multiple Remote File Inclusion Vulnerabilities
SSV-8156 Quantum Game Library 0.7.2c Remote File Inclusion Vulnerabilities
SSV-8103 Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability
SSV-8104 LookStrike Lan Manager 0.9 Remote / Local File Inclusion Vulnerabilities
SSV-8108 artmedic weblog 1.0 Multiple Local File Inclusion Vulnerabilities
SSV-8098 Affiliate Market Ver.0.1 BETA (language) Local File Inclusion Vulnerability
SSV-8076 PowerNews (Newsscript) 2.5.6 Local File Inclusion Vulnerabilities
SSV-8071 OpenSiteAdmin <= 0.9.1.1 Multiple File Inclusion Vulnerabilities
SSV-8065 XOOPS 2.0.18 Local File Inclusion / URL Redirecting Vulnerabilities
SSV-8059 VHD Web Pack 2.0 (index.php page) Local File Inclusion Vulnerability
SSV-8067 All Club CMS <= 0.0.1f index.php Local File Inclusion Vulnerability
SSV-8039 PHP Links <= 1.3 smarty.php Remote File Inclusion Vulnerability
SSV-8034 Mindmeld 1.2.0.10 Multiple Remote File Inclusion Vulnerabilities
SSV-8031 Joomla Component ChronoForms 2.3.5 RFI Vulnerabilities
SSV-8023 Connectix Boards <= 0.8.2 template_path Remote File Inclusion Exploit
SSV-7931 phpMyClub 0.0.1 (page_courante) Local File Inclusion Vulnerability
SSV-7924 Bubbling Library 1.32 Multiple Local File Inclusion Vulnerabilities
SSV-7922 Liquid-Silver CMS 0.1 (update) Local File Inclusion Vulnerability
SSV-2860 SLAED CMS 'index.php'本地文件包含漏洞
SSV-2856 Liquid-Silver CMS 'update/index.php'本地文件包含漏洞
SSV-7899 Lama Software (14.12.2007) Multiple Remote File Inclusion Vulnerabilities
SSV-7887 Mini File Host 1.2.1 (upload.php language) Local File Inclusion Exploit
SSV-7878 Small Axe 0.3.1 (linkbar.php cfile) Remote File Inclusion Vulnerability
SSV-7881 Gradman <= 0.1.3 (agregar_info.php) Local File Inclusion Exploit
SSV-2835 MailBee WebMail Pro 'download_view_attachment.aspx'本地文件包含漏洞
SSV-7877 Gradman <= 0.1.3 (info.php tabla) Local File Inclusion Vulnerability
SSV-7866 Aria 0.99-6 (effect.php page) Local File Inclusion Vulnerability
SSV-7871 Gradman <= 0.1.3 (agregar_info.php) Local File Inclusion Exploit
SSV-7834 vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities
SSV-7827 Tuned Studios Templates Local File Inclusion Vulnerability
SSV-7830 osData <= 2.08 Modules Php121 Local File Inclusion Vulnerability
SSV-2790 SineCms 'index.php'远程文件包含漏洞
SSV-2793 Xoops XoopsGallery Module 'init_basic.php'远程文件包含漏洞
SSV-7799 XOOPS mod_gallery Zend_Hash_key + Extract RFI Vulnerability
SSV-7803 SineCMS <= 2.3.5 Local File Inclusion / RCE Vulnerabilities
SSV-7786 SNETWORKS PHP CLASSIFIEDS 5.0 Remote File Inclusion Vulnerability
SSV-7782 samPHPweb (db.php commonpath) Remote File Inclusion Vulnerability
SSV-7780 NetRisk <= 1.9.7 Remote/Local File Inclusion Vulnerability
SSV-2760 SanyBee Gallery 'index.php'本地文件包含漏洞
SSV-7763 MolyX BOARD 2.5.0 (index.php lang) Local File Inclusion Vulnerability
SSV-7761 SanyBee Gallery 0.1.1 (p) Local File Inclusion Vulnerability
SSV-7760 MatPo Bilder Galerie 1.1 Remote File Inclusion Vulnerability
SSV-7755 Kontakt Formular 1.4 Remote File Inclusion Vulnerability
SSV-7752 Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability
SSV-2733 XZeroScripts XZero Community Classifieds 'config.inc.php'远程文件包含漏洞
SSV-2735 XZeroScripts XZero Community Classifieds 本地文件包含漏洞
SSV-7747 XCMS <= 1.82 Remote Local File Inclusion Vulnerability
SSV-2732 PNphpBB2 'printview.php'本地文件包含漏洞
SSV-2720 Shadowed Portal远程文件包含漏洞
SSV-2712 Agares Media ThemeSiteScript 'loadadminpage'远程文件包含漏洞
SSV-2714 Joomla mosDirectory Component mosConfig_absolute_path远程文件包含漏洞
SSV-7741 XZero Community Classifieds <= 4.95.11 Remote File Inclusion Vuln
SSV-7742 PNphpBB2 <= 1.2i (printview.php phpEx) Local File Inclusion Vuln
SSV-2689 Ovidentia多个脚本远程文件包含漏洞
SSV-2696 Free QBoard qb_path远程文件包含漏洞
SSV-2693 Galleria远程文件包含漏洞
SSV-2694 MyPHP CMS global_header.php远程文件包含漏洞
SSV-2705 PHPMySMS gateway.php远程文件包含漏洞
SSV-7718 TeamCalPro 3.1.000 Multiple Remote/Local File Inclusion Vulnerabilities
SSV-7709 ThemeSiteScript 1.0 (index.php loadadminpage) RFI Vulnerability
SSV-2677 Social Engine 'global_lang'本地文件包含漏洞
SSV-7712 Joomla Component mosDirectory 2.3.2 Remote File Inclusion Vuln
SSV-7711 Agares PhpAutoVideo 2.21 Remote/Local File Inclusion Vulnerabilities
SSV-2668 mBlog 'index.php'本地文件包含漏洞
SSV-2671 MyBlog Games.PHP ID远程文件包含漏洞
SSV-7694 NmnNewsletter 1.0.7 (output) Remote File Inclusion Vulnerability
SSV-7689 Arcadem LE 2.04 (loadadminpage) Remote File Inclusion Vulnerability
SSV-7690 Shadowed Portal <= 5.7d3 (POST) Remote File Inclusion Vulnerability
SSV-7688 Social Engine 2.0 Multiple Local File Inclusion Vulnerabilities
SSV-7659 PhpMyDesktop|arcade 1.0 Final (phpdns_basedir) RFI Vulnerability
SSV-2608 Fastpublish CMS Designconfig.PHP远程文件包含漏洞
SSV-2611 City Writer 'head.php'远程文件包含漏洞
SSV-7629 Oreon 1.4 / Centreon 1.4.1 Multiple RFI Vulnerabilties
SSV-7630 Form Tools 1.5.0b Multiple Remote File Inclusion Vulnerabilities
SSV-7611 CityWriter 0.9.7 head.php Remote File Inclusion Vulnerability
SSV-7596 Mcms Easy Web Make (index.php template) Local File Inclusion Vuln
SSV-7598 Fastpublish CMS 1.9999 config[fsBase] RFI Vulnerability
SSV-2586 PHP-Nuke autohtml.php本地文件包含漏洞
SSV-7595 ViArt CMS/Shop/HelpDesk 3.3.2 Remote File Inclusion Vulnerability
SSV-7584 Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities
SSV-2559 Rayzz Class_HeaderHandler.Lib.PHP远程文件包含漏洞
SSV-2560 Tellmatic tm_includepath远程文件包含漏洞
SSV-7572 SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities
SSV-2533 PHP-CON Include.PHP远程文件包含漏洞
SSV-2528 Project Alumni Index.PHP Act参数本地文件包含漏洞
SSV-2524 datecomm Social Networking Software Index.PHP远程文件包含漏洞
SSV-7540 Rayzz Script 2.0 Remote / Local File Inclusion Vulnerabilities
SSV-7539 tellmatic 1.0.7 Multiple Remote File Inclusion Vulnerabilities
SSV-7522 PHP-CON 1.3 (include.php) Remote File Inclusion Vulnerability
SSV-7523 EHCP <= 0.22.8 Multiple Remote File Inclusion Vulnerabilities
SSV-7524 Charrays CMS 0.9.3 Multiple Remote File Inclusion Vulnerabilities
SSV-2506 RunCMS Common.PHP本地文件包含漏洞
SSV-2502 Amber Script Show_Content.PHP本地文件包含漏洞
SSV-2494 PHPCMS 2007 show_pic.inc.php本地包含漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English