#cwe-98

共收录 155 条相关情报。

← 返回所有主题
漏洞预警2026-05-20 发布INFO

Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method View::renderPhpFile() that leads to Local File Inclusion. ...

CVE-2026-39850

Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method V

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File...

CVE-2026-7522

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.1.0 via the 'template' parameter. This mak...

CVE-2026-7522

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, an

历史摘要 · 未重新核验 · NVD

安全公告2026-05-17 发布INFO

Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability...

CVE-2018-25324

Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows...

CVE-2018-25329

WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated...

CVE-2020-37246

Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated...

CVE-2021-47978

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-16 发布MEDIUM

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. ...

CVE-2021-47978

CVE-2021-47978 是 ProcessMaker 3.5.4 中的一个本地文件包含(Local File Inclusion, LFI)漏洞。由于对路径遍历验证不当,未经身份验证的攻击者可通过发送带有目录遍历序列(如 ../)的请

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-16 发布INFO

Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path p...

CVE-2020-37246

Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the pack para...

CVE-2020-37169

WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.2 via the 'path' parameter of the 'get_conte...

CVE-2026-3425

The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in

历史摘要 · 未重新核验 · NVD

安全公告2026-05-11 发布INFO

Yii 2: Local file inclusion via view parameter name collision

CVE-2026-39850

The core view rendering method `View::renderPhpFile()` calls `extract($_params_, EXTR_OVERWRITE)` before the `require` s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that...

CVE-2022-50954

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated att

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-10 发布INFO

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the contro...

CVE-2022-50954

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated att

历史摘要 · 未重新核验 · NVD

安全公告2026-05-09 发布INFO

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in...

CVE-2026-8208

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the re

历史摘要 · 未重新核验 · GitHub Advisory