PT-2022-25028 · Unknown · Systematic Fix Adapter

Name of the Vulnerable Software and Affected Versions: Systematic FIX Adapter ALFAFX version 2.4.0.25 Description: The issue allows remote file inclusion via a UNC share pathname and also enables absolute path traversal to local pathnames. Recommendations: For version 2.4.0.25, consider restricti...

Systematic Alpha Management FIX Adapter 路径遍历漏洞

Systematic Alpha Management FIX Adapter is an adapter from Systematic Alpha Management, USA. A security vulnerability exists in Systematic Alpha Management FIX Adapter ALFAFX version 2.4.0.25 13/09/2017, which stems from a vulnerability that allows remote files to be included via UNC shared...

Remote file inclusion

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php...

Remote file inclusion

A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to read arbitrary files...

DOMPDF Remote File Inclusion Vulnerability

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...

GHSA-48R9-4V93-X4WH DOMPDF Remote File Inclusion Vulnerability

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...

TYPO3 PHP remote file inclusion vulnerability

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable...

GHSA-4H9J-F98M-P4HG TYPO3 PHP remote file inclusion vulnerability

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable...

EUVD-2006-4519

PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter...

EUVD-2006-4199

PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolutepath parameter...

CVE-2022-27257

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

Hubzilla 输入验证错误漏洞

Hubzilla is a powerful open source platform for creating interconnected websites with a decentralized identity, communication and permissions framework built using common web server technologies. A security vulnerability exists in Hubzilla versions prior to 7.2, which stems from a PHP local file...

Remote file inclusion

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Unspecified Vulnerability in IBM Planning Analytics (CNVD-2022-13923)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics that stems from the vulnerability of IBM...

IBM Planning Analytics 命令注入漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics that stems from the vulnerability of IBM...

PT-2022-15348 · Ibm · Ibm Planning Analytics

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics version 2.0 Description: The issue allows for a Remote File Include RFI attack, where user input could be passed into file include commands, and the web application could be tricked into including remote files with...

CVE-2022-22308

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include RFI attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891...

OpenBMCS 2.4 Remote File Inclusion / Server-Side Request Forgery Vulnerabilities

OpenBMCS 2.4 Unauthenticated SSRF / RFI Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our...

WordPress plugin WP Coder 跨站请求伪造漏洞

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The WordPress WP Coder plugin has a file inclusion vulnerability in versions prior to 2.5.2, which stems from the fact that the wow-company administration menu page does not effectively filter call...

WordPress plugin Button Generator 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The WordPress Button Generator Plugin has a file inclusion vulnerability prior to 2.3.3. The vulnerability stems from the fact that the plugin does not effectively filter calls to remote file...