#cwe-98

共收录 155 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布MEDIUM

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Fre...

CVE-2026-62121

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the include path by manipulating the ...

CVE-2010-20125

DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated a

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is vulnerable to Local File Inclusion in all versions u...

CVE-2026-110185

The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPres

来源摘录 · NVD

安全公告2026-10-28 发布INFO

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0...

CVE-2014-125137

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-28 发布INFO

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inclusion vulnerability in the run parameter of admin/task.p...

CVE-2014-125137

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abs...

CVE-2016-20101

Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to...

CVE-2026-113402

ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attacke

历史摘要 · 未重新核验 · NVD

安全公告2026-10-14 发布INFO

The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up...

CVE-2026-104995

The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

CVE-2026-66566

Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

CVE-2026-66566

Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

CVE-2026-62115

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

CVE-2026-62099

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

CVE-2026-62096

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

CVE-2026-62094

Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

CVE-2026-62092

Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.

CVE-2026-62075

Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

CVE-2026-62074

Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.

CVE-2026-62070

Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.

CVE-2026-62069

Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.

CVE-2026-62068

Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.

历史摘要 · 未重新核验 · NVD