CVE-2025-69160: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Gita = 1.11 versions...

CVE-2025-69109: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

CVE-2025-69112: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Planty = 1.14.0 versions...

CVE-2025-69113: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Nexio = 1.10.0 versions...

CVE-2025-69116: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...

CVE-2025-69118: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...

CVE-2026-34893: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Thegov Core 2.0.23 versions...

CVE-2026-34895: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Softlab Core 1.2.11 versions...

CVE-2026-48820: Improper Control of Filename for Include/Require Statement in PHP Program

CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.2.12, and 5.3.0 through 5.3.5, View::getElementFileName does not check that the resolved element path is within the application/plugin view template paths...

CVE-2025-69117: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...

PT-2026-50315

Unauthenticated Local File Inclusion in ChapterOne = 1.7 versions...

CVE-2025-69158: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Granola = 1.13 versions...

PT-2026-50280

Unauthenticated Local File Inclusion in Reprizo = 1.0.8 versions...

CVE-2025-69177: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Roneous = 2.1.5 versions...

📄 Discuz! X5.0 Chained Remote Code Execution

This Metasploit module uses race condition and local file inclusion vulnerabilities in Discuz! X5.0 in order to achieve remote code execution. ================================================================================================================================== | Title : Discuz! X5.0...

CVE-2025-69124: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Especio = 1.0 versions...

CVE-2025-69175: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Line Agency = 1.3.1 versions...

CVE-2025-69136: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Wanium = 1.9.8 versions...

CVE-2025-69107: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Rosaleen = 2.8 versions...

CVE-2025-69174: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Etude = 1.6 versions...