CVE-2025-47572: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in mojoomla School Management allows PHP Local File Inclusion. This issue affects School Management: from n/a through 93.0.0...

CVE-2025-28991: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme Evon snsevon allows PHP Local File Inclusion.This issue affects Evon: from n/a through = 3.4...

PT-2025-25694 · Unknown · Thembay Besa

Name of the Vulnerable Software and Affected Versions: thembay Besa versions n/a through 2.3.8 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...

PT-2025-25702 · Unknown · Thembay Aora

Name of the Vulnerable Software and Affected Versions: thembay Aora versions 1.3.9 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-25700 · Thembay · Thembay Maia

Name of the Vulnerable Software and Affected Versions: thembay Maia versions 1.1.15 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-25703 · Unknown · Thembay Diza

Name of the Vulnerable Software and Affected Versions: thembay Diza versions 1.3.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This ...

PT-2025-25696 · Unknown · Thembay Nika

Name of the Vulnerable Software and Affected Versions: thembay Nika versions 1.2.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-25701 · Unknown · Thembay Hara

Name of the Vulnerable Software and Affected Versions: thembay Hara versions 1.2.10 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-25714 · Unknown · Loftocean Cozystay

Name of the Vulnerable Software and Affected Versions: LoftOcean CozyStay affected versions not specified Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-25675 · Unknown · Mojoomla Wpgym

Name of the Vulnerable Software and Affected Versions: mojoomla WPGYM versions n/a through 65.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

WordPress plugin Simen has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Evon security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin DSK security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress DSK plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an attack...

PT-2025-25697 · Unknown · Thembay Ruza

Name of the Vulnerable Software and Affected Versions: themBay Ruza versions 1.0.0 through 1.0.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

Mendix Studio Pro Path Traversal

The vulnerability in the visual integrated development environment for creating Mendix Studio Pro applications is related to incorrect restrictions on the path to the restricted catalog during module installation. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

IBM OpenPages File Write

The vulnerability of the IBM OpenPages and IBM OpenPages with Watson web interfaces relates to incorrect restrictions on the path name to the restricted catalog. Exploitation of this vulnerability could allow a malicious actor to write to or re-write any files remotely...

PT-2025-25669 · Simen · Simen

Name of the Vulnerable Software and Affected Versions: Simen versions n/a through 4.6 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File Inclusion in...

CVE-2025-25265 Unauthenticated File Read via Web Interface

A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure...

PT-2025-25557

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.0.0 through 7.4.3.4 Liferay DXP versions 7.4 GA, 7.3 GA through update 34 Description A path traversal vulnerability exists with the downloading and installation of Xuggler, allowing remote attackers to add files to...

M-Files Server File Read

The vulnerability of the M-Files Server platform’s automation interface is related to incorrect restrictions on the path name to the restricted catalog during the processing of the final point. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...