#cwe-98
共收录 155 条相关情报。
← 返回所有主题 漏洞预警2026-05-20 发布INFO
CVE-2026-39850
Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method V
历史摘要 · 未重新核验 · NVD
安全公告2026-05-20 发布INFO
CVE-2026-7522
The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, an
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-20 发布INFO
CVE-2026-7522
The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, an
历史摘要 · 未重新核验 · NVD
安全公告2026-05-17 发布INFO
CVE-2018-25324
Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticat
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-17 发布INFO
CVE-2018-25329
WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-16 发布INFO
CVE-2020-37246
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and d
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-16 发布INFO
CVE-2021-47978
ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-16 发布MEDIUM
CVE-2021-47978
CVE-2021-47978 是 ProcessMaker 3.5.4 中的一个本地文件包含(Local File Inclusion, LFI)漏洞。由于对路径遍历验证不当,未经身份验证的攻击者可通过发送带有目录遍历序列(如 ../)的请
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-16 发布INFO
CVE-2020-37246
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and d
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2020-37169
WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2026-3425
The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in
历史摘要 · 未重新核验 · NVD
安全公告2026-05-11 发布INFO
CVE-2026-39850
The core view rendering method `View::renderPhpFile()` calls `extract($_params_, EXTR_OVERWRITE)` before the `require` s
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-10 发布INFO
CVE-2022-50954
WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated att
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-10 发布INFO
CVE-2022-50954
WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated att
历史摘要 · 未重新核验 · NVD
安全公告2026-05-09 发布INFO
CVE-2026-8208
Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the re
历史摘要 · 未重新核验 · GitHub Advisory