cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | WordPress Nasa Coreプラグインにおけるローカルファイルインクルード 📝 シナリオ: SOCの一日 いつもの月曜日。私はSOCダッシュボードにログインし、いつものようにアラートを確認しています。一つ目に留まるアラートが届きました： アラート: ローカルファイルインクルージョン LFI の可能性 IPアドレス: 203.0.113.44 URL: /index.php?file=../../../../etc/passwd ユーザーエージェント:...

CVE-2025-39507

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/a through 6.4.4...

CVE-2025-39507 WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/a through 6.4.4...

CVE-2025-39507 WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in NasaTheme Nasa Core allows PHP Local File Inclusion. This issue affects Nasa Core: from n/a through 6.3.2...

CVE-2025-39507

The CVE-2025-39507 entry concerns WordPress Nasa Core plugin (versions through 6.3.2) vulnerable to Local File Inclusion via improper filename control in PHP include/require. Affected software: Nasa Core

WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin Nasa Core versions 6.4.4...