CVE-2024-33113

CVE-2024-33113 D-LINK DIR-845L 路由器通过 bscsmsinbox.php 文件存在信息泄露漏洞。 CVE-2024-33113 是 D-LINK DIR-845L 路由器中的一个漏洞，该漏洞通过 bscsmsinbox.php 文件导致信息泄露。该漏洞源于对 include 函数的不当处理，攻击者可通过操控 $file 变量进行利用。这使得攻击者能够包含任意 PHP 脚本，并可能获取敏感信息，例如路由器的用户名和密码。 PoC...

CVE-2020-12640

CVE-2020-12640：Roundcube Webmail 中通过“插件值”实现本地 PHP 文件包含 在 Roundcube 1.4.4、1.3.11 和 1.2.10 之前的版本中存在路径遍历漏洞。 由于 "plugins" 参数未进行清理/输入过滤，因此有权访问 Roundcube 安装程序的攻击者可利用路径遍历漏洞，在本地系统上包含任意 PHP 文件。 厂商披露： 该漏洞的厂商披露和修复可在此处找到：链接。 要求： 此漏洞需要： 访问 Roundcube Webmail 安装程序组件 对目标文件系统的写入权限 概念验证： 更多详情和利用过程可在此 PDF 中找到。...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — 通过模板Cookie路径遍历导致的PrivateBin本地文件包含 严重程度： 中 CVSS v3.1: 5.8 攻击向量： AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N 受影响版本： PrivateBin = 1.7.7 修复版本： 2.0.3 CWE： CWE-23（相对路径遍历）、CWE-73（外部控制文件名或路径）、CWE-98（PHP文件包含） 官方公告： https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-g2j9-g8r5-rg82...

CVE-2026-54710: Improper Input Validation

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution RCE vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary PHP files, allowing authenticated attackers to execute arbitrary PHP code on the server with the privileg...

CVE-2026-88843

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users with the Contributor role and above to include and execute arbitrary local PHP files on the server. An equivalent path w...

PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core

On September 22, 2026, the WordPress Security Team released WordPress 7.1.2, as well as security backports for every branch back to WordPress 4.7 to address a critical unauthenticated path traversal vulnerability. The issue is tracked as CVE-2026-87902 and has a CVSS v4.0 score of 9.2 Critical. T...

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with...

EUVD-2026-71866

The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files...

Linux Distros Unpatched Vulnerability : CVE-2026-48820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.2.12, and 5.3.0...

CVE-2026-67285 Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

CVE-2026-67285: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

Exploit for Code Injection in Backupbliss Backup_Migration

CVE-2023-6553 PHP File Inclusion Leading to RCE — Backup M...

CVE-2026-44177

CVE-2026-44177 affects Kirby CMS (Kirby 5.3.0 up to

CVE-2026-44177 Kirby: Pre-authentication path traversal and PHP file inclusion during user lookup

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path traversal vulnerability. Version 5.3.0 introduced a performance improvement to the Users collection that loaded user object...

CVE-2026-44177 Kirby: Pre-authentication path traversal and PHP file inclusion during user lookup

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path traversal vulnerability. Version 5.3.0 introduced a performance improvement to the Users collection that loaded user object...

CVE-2026-44177 Kirby: Pre-authentication path traversal and PHP file inclusion during user lookup

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path traversal vulnerability. Version 5.3.0 introduced a performance improvement to the Users collection that loaded user object...

CVE-2026-44177: Improper Limitation of a Pathname to a Restricted Directory

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path traversal vulnerability. Version 5.3.0 introduced a performance improvement to the Users collection that loaded user object...

PT-2026-43452

Name of the Vulnerable Software and Affected Versions Kirby versions 5.3.0 through 5.4.0 Description Kirby failed to correctly validate the provided user ID, leading to a path traversal issue. This occurs when the system uses the user ID to locate account directories under site/accounts. The issu...

EUVD-2026-15499

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: from n/a through = 1.3.2...

AVideo has an Unauthenticated Local File Inclusion in API locale (RCE possible with writable PHP)

Summary An unauthenticated API endpoint APIName=locale concatenates user input into an include path with no canonicalization or whitelist. Path traversal is accepted, so arbitrary PHP files under the web root can be included. In our test this yielded confirmed file disclosure and code execution o...