48641 matches found
CVE-2025-69159: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Printo = 1.11 versions...
CVE-2025-69142: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Abelle = 1.22 versions...
CVE-2025-69149: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Top Dog = 1.0.5 versions...
CVE-2025-69160: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Gita = 1.11 versions...
CVE-2025-69109: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...
CVE-2025-69112: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Planty = 1.14.0 versions...
CVE-2025-69113: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Nexio = 1.10.0 versions...
CVE-2025-69116: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...
CVE-2025-69118: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...
CVE-2026-34893: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Thegov Core 2.0.23 versions...
CVE-2026-34895: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Softlab Core 1.2.11 versions...
CVE-2026-48820: Improper Control of Filename for Include/Require Statement in PHP Program
CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.2.12, and 5.3.0 through 5.3.5, View::getElementFileName does not check that the resolved element path is within the application/plugin view template paths...
CVE-2025-69117: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...
PT-2026-50550
Name of the Vulnerable Software and Affected Versions CakePHP versions prior to 4.5.11 CakePHP versions 4.6.0 through 4.6.3 CakePHP versions 5.0.0 through 5.1.6 CakePHP versions 5.2.0 through 5.2.12 CakePHP versions 5.3.0 through 5.3.5 Description The getElementFileName function in the View class...
PT-2026-50315
Unauthenticated Local File Inclusion in ChapterOne = 1.7 versions...
CVE-2025-69158: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Granola = 1.13 versions...
PT-2026-50280
Unauthenticated Local File Inclusion in Reprizo = 1.0.8 versions...
CVE-2025-69177: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Roneous = 2.1.5 versions...
📄 Discuz! X5.0 Chained Remote Code Execution
This Metasploit module uses race condition and local file inclusion vulnerabilities in Discuz! X5.0 in order to achieve remote code execution. ================================================================================================================================== | Title : Discuz! X5.0...