Lucene search
+L

9355 matches found

OSV
OSV
added 2025/06/27 12:15 p.m.8 views

CVE-2025-52816

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themehunk Zita allows PHP Local File Inclusion. This issue affects Zita: from n/a through 1.6.5...

9.8CVSS5.8AI score0.00447EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/27 12:15 p.m.9 views

CVE-2025-24760

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Sofass sofass allows PHP Local File Inclusion.This issue affects Sofass: from n/a through = 1.3.4...

8.1CVSS0.00612EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/27 12:00 a.m.14 views

PT-2025-27131 · Unknown · Apuswp Domnoo

Name of the Vulnerable Software and Affected Versions: ApusWP Domnoo versions 1.49 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion in...

8.1CVSS6.7AI score0.00496EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.12 views

WordPress plugin Diza 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00496EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/27 12:00 a.m.10 views

PT-2025-27096 · Unknown · Thembay Puca

Name of the Vulnerable Software and Affected Versions: thembay Puca versions n/a through 2.6.33 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...

8.1CVSS7.5AI score0.00612EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.10 views

sublinkX 路径遍历漏洞

sublinkX is an open source node subscription conversion and generation management system developed by Chen Hui. A path traversal vulnerability exists in sublinkX 1.8 and earlier versions, which stems from the incorrect operation of the parameter filename in the file api/template.go, resulting in...

6.5CVSS6.4AI score0.00371EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.11 views

WordPress plugin CTUsers 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS6.6AI score0.00527EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.5 views

WordPress plugin Hotel Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.4AI score0.0061EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.5 views

WordPress plugin Zikzag Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS6.6AI score0.00496EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/27 12:00 a.m.6 views

PT-2025-27166 · Nicdark · Nicdark Hotel Booking

Name of the Vulnerable Software and Affected Versions: nicdark Hotel Booking versions n/a through 3.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

7.5CVSS7AI score0.0061EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/06/27 12:00 a.m.14 views

PT-2025-27100 · Ctusers · Ctusers

Name of the Vulnerable Software and Affected Versions: CTUsers versions through 1.0.0 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. Recommendations:...

7.5CVSS7AI score0.00527EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.10 views

WordPress plugin FW Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS6.6AI score0.00612EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/27 12:00 a.m.9 views

PT-2025-27164 · Unknown · Gmedia Photo Gallery

Name of the Vulnerable Software and Affected Versions: Gmedia Photo Gallery versions 1.23.0 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP programs, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...

7.5CVSS6.7AI score0.0061EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.6 views

WordPress plugin Greenmart 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.00612EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.6 views

WordPress plugin Gmedia Photo Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.5AI score0.0061EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.7 views

WordPress plugin Networker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS6.5AI score0.00496EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.11 views

WordPress plugin WPB Category Slider for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.5AI score0.00575EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.10 views

LightRAG 路径遍历漏洞

LightRAG is a search enhancement generation application at HKU University in China. A path traversal vulnerability exists in LightRAG 1.3.8 and earlier versions, which stems from path traversal due to incorrect manipulation of the parameter file.filename in the file...

5.3CVSS5.2AI score0.00181EPSS
SaveExploits0References7
OSV
OSV
added 2025/06/26 1:15 p.m.10 views

CVE-2025-5966

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report...

8.1CVSS5.8AI score0.01103EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/26 1:15 p.m.12 views

CVE-2025-5966

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report...

8.1CVSS0.01103EPSS
SaveExploits0References1
Rows per page
Query Builder