Lucene search
+L

24080 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•10 views

CVE-2026-32393: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CreativesPlanet Greenly Theme Addons greenly-addons allows PHP Local File Inclusion.This issue affects Greenly Theme Addons: from n/a through 8.2...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•10 views

CVE-2026-32400: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemetechMount Boldman boldman allows PHP Local File Inclusion.This issue affects Boldman: from n/a through = 7.7...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•5 views

CVE-2026-32384: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magepeopleteam WpBookingly service-booking-manager allows PHP Local File Inclusion.This issue affects WpBookingly: from n/a through = 1.2.9...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•8 views

CVE-2026-32426: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themelexus Medilazar Core medilazar-core allows PHP Local File Inclusion.This issue affects Medilazar Core: from n/a through 1.4.7...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•20 views

PT-2026-25246

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemetechMount Boldman boldman allows PHP Local File Inclusion.This issue affects Boldman: from n/a through = 7.7...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•25 views

PT-2026-25272

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themelexus Medilazar Core medilazar-core allows PHP Local File Inclusion.This issue affects Medilazar Core: from n/a through 1.4.7...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•22 views

WordPress plugin Turbo Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•28 views

PT-2026-25247

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.9...

5.8AI score0.00589EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•21 views

WordPress plugin Greenly 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•24 views

WordPress plugin Client Invoicing by Sprout Invoices 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.2CVSS5.8AI score0.00589EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•8 views

CVE-2026-32364: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in redqteam Turbo Manager turbo-manager allows PHP Local File Inclusion.This issue affects Turbo Manager: from n/a through 4.0.8...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•22 views

WordPress plugin Boldman 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•7 views

CVE-2026-32401: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.9...

7.2CVSS5.8AI score0.00589EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/12 9:34 p.m.•17 views

EUVD-2025-208619

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...

5.8AI score0.00281EPSS
SaveExploits0References4
NVD
NVD
•added 2026/03/12 7:16 p.m.•20 views

CVE-2025-66955

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...

6.5CVSS0.00281EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/03/12 11:36 a.m.•24 views

WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin BuilderPress versions = 2.0.1...

5.8AI score0.00616EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/12 12:00 a.m.•20 views

CVE-2025-66955

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...

5.9AI score0.00281EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/12 12:00 a.m.•10 views

CVE-2025-66955

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...

5.8AI score0.00281EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/12 12:00 a.m.•28 views

CVE-2025-66955

Asseco SEE Live 2.0 contains a Local File Inclusion (LFI) vulnerability within its Contact Plan, E-Mail, SMS, and Fax components. Remote authenticated users can exploit this by using the path parameter in the downloadAttachment and downloadAttachmentFromPath API calls to access arbitrary files on...

6.5CVSS5.9AI score0.00281EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2026/03/12 12:00 a.m.•21 views

Asseco SEE Live 安全漏洞

Asseco SEE Live is a real-time customer interaction and notification management system for financial services offered by the Polish company Asseco. Version 2.0 of Asseco SEE Live contains a security vulnerability. This vulnerability stems from local file inclusion in the Contact Plan, E-Mail, SMS...

6.5CVSS5.8AI score0.00281EPSS
SaveExploits0References3
Rows per page
Query Builder