Input validation

aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion LFI vulnerability that occurs due to missing input validation in v5.x...

CVE-2022-28741

aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion LFI vulnerability that occurs due to missing input validation in v5.x...

CVE-2022-28741

CVE-2022-28741 affects aEnrich a+HRD 5.x Learning Management Key Performance Indicator System. The issue is a Local File Inclusion (LFI) vulnerability caused by missing input validation in version 5.x. Impact details in the CVE indicate high severity (CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

CVE-2022-34121

Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...

CVE-2022-34121

Cuppa CMS v1.0 is vulnerable to a local file inclusion (LFI) through the component /templates/default/html/windows/right.php . The issue, described across sources, enables unauthorized access and disclosure of sensitive information, with potential remote code execution implied by some references....

CVE-2022-29446

Authenticated administrator or higher role Local File Inclusion LFI vulnerability in Wow-Company's Counter Box plugin = 1.1.1 at WordPress...

WordPress Jupiter premium theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion (LFI) vulnerability

Authenticated Path Traversal and Local File Inclusion LFI vulnerability discovered by Ramuel Gall Wordfence in WordPress Jupiter premium theme versions = 6.10.1. Solution Update the WordPress Jupiter premium theme to the latest available version at least 6.10.2...

WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability

Local File Inclusion LFI vulnerability was discovered by 0x9B Patchstack Alliance in WordPress Herd Effects plugin versions = 5.2. Solution Update the WordPress Herd Effects plugin to the latest available version at least 5.2.1...

Markdown Menace: Discovering an LFI Vulnerability on a Blogging Platform

Protecting sensitive information is a recurring and widely known concern in the security community. As researchers, we know all too well how information can be used maliciously I mean, come on … it’s our job. Considering the size of the threat vector that is LFI, it’s something that developers an...

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion Vulnerability

Exploit Title: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion LFI Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.franklinfueling.com/ Version: 1.8.19.8580 Tested on: Linux Firefox CVE : CVE-2021-46417 Proof of Concept ============ HT...

CVE-2022-26646

Online Banking System Protect v1.0 was discovered to contain a local file inclusion LFI vulnerability via the pages parameter...

Design/Logic Flaw

Online Banking System Protect v1.0 was discovered to contain a local file inclusion LFI vulnerability via the pages parameter...

CVE-2022-26646

CVE-2022-26646 affects Online Banking System Protect v1.0 via a local file inclusion (LFI) vulnerability driven by the pages parameter. Several connected sources confirm an unauthenticated LFI that can read internal PHP files and, per an exploit reference, enable privilege escalation from a null ...

CVE-2022-26646

Online Banking System Protect v1.0 was discovered to contain a local file inclusion LFI vulnerability via the pages parameter...

WordPress Amministrazione Aperta plugin <= 3.7.3 - Local File Inclusion (LFI) vulnerability

Local File Inclusion LFI vulnerability discovered by Hassan Khan Yusufzai Splint3r7 in WordPress Amministrazione Aperta plugin versions = 3.7.3. Solution Update the WordPress Amministrazione Aperta plugin to the latest available version at least 3.8...

Archeevo 5.0 - Local File Inclusion Vulnerability

Exploit Title: Archeevo 5.0 - Local File Inclusion Google Dork: intitle:"archeevo" Exploit Author: Miguel Santareno Vendor Homepage: https://www.keep.pt/ Software Link: https://www.keep.pt/produtos/archeevo-software-de-gestao-de-arquivos/ Version: 5.0 Tested on: windows 1. Description...

Archeevo 5.0 Local File Inclusion

Exploit Title: Archeevo 5.0 - Local File Inclusion Google Dork: intitle:"archeevo" Date: 01/15/2021 Exploit Author: Miguel Santareno Vendor Homepage: https://www.keep.pt/ Software Link: https://www.keep.pt/produtos/archeevo-software-de-gestao-de-arquivos/ Version: 5.0 Tested on: windows 1...

What Is Local File Inclusion Vulnerability?

Introduction This article clarifies what nearby record consideration LFI weaknesses are, including the way assailants can take advantage of them on weak web applications and what safe coding practices can assist you with forestalling local document incorporation assaults. Record incorporations ar...

Draytek VigorConnect LFI (CVE-2021-20123)

Binary data draytekvigorconnectcve-2021-20123.nbin...