Advisories · Weakness
File inclusion.
A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 7.2 High
HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion
- realmag777 HUSKY – Products Filter Professional for WooCommerce
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
- stylemix MasterStudy LMS WordPress Plugin – for Online Courses and Education
- File inclusion
- CVSS 8.8 High
Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion
- nicdark Restaurant Reservations
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion
- paultgoodchild Shield: Blocks Bots, Protects Users, and Prevents Security Breaches
- File inclusion
- CVSS 7.5 High
PHP file inclusion in Trend Micro, Inc. Trend Micro Apex Central
- Trend Micro, Inc. Trend Micro Apex Central
- File inclusion
- CVSS 6.6 Medium
Remote file inclusion vulnerability in FireEye Central Management
- FireEye Central Management
- File inclusion
- CVSS 6.6 Medium
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
- carazo Import and export users and customers
- File inclusion
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Local File Inclusion (RCE) in Cacti
- cacti
- File inclusion
- CVSS 8.1 High
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
- infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News
- File inclusion
- CVSS 8.8 High
HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- jonashjalmarsson HTML filter and csv-file search
- File inclusion
- CVSS 8.8 High
Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
- g5theme Grid Plus – Unlimited grid layout
- File inclusion
- CVSS 9.9 CriticalCritical · CVSS 9+
PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode
- bloafer PHP to Page
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion
- hyno Dropbox Folder Share
- File inclusion
- CVSS 7.5 High
FUXA local file inclusion vulnerability
- File inclusion
<=1.1.12 · no fixed version yet
GHSA-wwfj-h843-3hrq · CVE-2023-31718 - CVSS 7.5 High
FUXA vulnerable to Local File Inclusion
- File inclusion
<=1.1.12 · no fixed version yet
GHSA-45c3-c4c3-8rqg · CVE-2023-31716 - CVSS 9.8 CriticalCritical · CVSS 9+
Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
- Path traversal
- File inclusion
>=2.0.0, <2.0.5 · fixed in 2.0.5
GHSA-7cfq-72w2-24q4 · CVE-2015-5467 -
An issue was discovered in Geomatika IsiGeo Web 6.0.
- File inclusion
- CVSS 7.1 High
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
- File inclusion
- Server-side request forgery (SSRF)
<1.8.0 · fixed in 1.8.0
GHSA-67c6-q4j4-hccg · CVE-2023-40033 - CVSS 9.8 CriticalCritical · CVSS 9+
Canto <= 3.0.4 - Unauthenticated Remote File Inclusion
- Canto
- File inclusion
- CVSS 9.9 CriticalCritical · CVSS 9+
Cockpit PHP Remote File Inclusion vulnerability
- File inclusion
<2.6.3 · fixed in 2.6.3
GHSA-xcq3-7pf3-5jvc · CVE-2023-4195 - CVSS 8.8 HighCritical · CVSS 7+ and EPSS
wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents
- tomdever wpForo Forum
- File inclusion
- CVSS 7.2 High
PHP Remote File Inclusion in unilogies/bumsys
- unilogies/bumsys
- File inclusion
- CVSS 8.8 High
AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability.
- File inclusion
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
PHP Remote File Inclusion in flatpressblog/flatpress
- flatpressblog/flatpress
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
PHP Remote File Inclusion in tsolucio/corebos
- tsolucio/corebos
- File inclusion
- CVSS 7.5 High
An issue was discovered in Appalti & Contratti 9.12.2.
- File inclusion
- CVSS 7.5 High
MobSF allows attackers to read arbitrary files via a crafted HTTP request
- File inclusion
<0.9.3 · fixed in 0.9.3
GHSA-f42p-vc8p-7x54 · CVE-2022-41547 - CVSS 9.8 CriticalCritical · CVSS 9+
A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
- File inclusion
- CVSS 4.7 Medium
Remote file inclusion vulnerability in ArcGIS Server help documentation
- Esri ArcGIS Server
- File inclusion
- CVSS 7.2 High
Improper file handling in concrete5/core
- File inclusion
- Weak cryptography or TLS
<8.5.7 · fixed in 8.5.7
GHSA-g3p2-hfqr-9m25 · CVE-2021-22968 - CVSS 8.1 High
PHP file inclusion in Advantech
- Advantech
- File inclusion
-
PHP file inclusion in - Cloud Access Connector - Cloud Access Connector Legacy
- - Cloud Access Connector - Cloud Access Connector Legacy
- File inclusion
- CVSS 4.8 Medium
Local File read vulnerability in OctoberCMS
- File inclusion
- CWE-829
>=1.0.319, <1.0.466 · fixed in 1.0.466
GHSA-r23f-c2j5-rx2f · CVE-2020-5295 - CVSS 7.5 High
Unintended Require in larvitbase-api
- File inclusion
- CWE-829
<0.5.5 · fixed in 0.5.5
GHSA-xf27-jqwv-gf3r · CVE-2019-5479 -
PHP file inclusion in Honeywell Experion PKS
- Honeywell Experion PKS
- File inclusion
-
PHP file inclusion in Schneider Electric Modicon PLC
- Schneider Electric Modicon PLC
- File inclusion
-
The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file
- Imagely NextGen Gallery plugin
- File inclusion
-
PHP file inclusion in Trend Micro Smart Protection Server (Standalone)
- Trend Micro Smart Protection Server (Standalone)
- File inclusion