CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- themerex gridironWordPress Gridiron theme <= 1.0.14 - Local File Inclusion vulnerability8.1 High
- themerex yottisWordPress Yottis theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- themerex scientiaWordPress Scientia theme <= 1.2.4 - Local File Inclusion vulnerability8.1 High
- themerex dronexWordPress DroneX theme <= 1.1.12 - Local File Inclusion vulnerability8.1 High
- themerex coinpressWordPress Coinpress theme <= 1.0.14 - Local File Inclusion vulnerability8.1 High
- themerex yungenWordPress Yungen theme <= 1.0.12 - Local File Inclusion vulnerability8.1 High
- themerex vixusWordPress Vixus theme <= 1.0.16 - Local File Inclusion vulnerability8.1 High
- themerex maxifyWordPress Maxify theme <= 1.0.16 - Local File Inclusion vulnerability8.1 High
- themerex lingvicoWordPress Lingvico theme <= 1.0.14 - Local File Inclusion vulnerability8.1 High
- themerex justitiaWordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerability8.1 High
- themerex tedissWordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability8.1 High
- themerex aldoWordPress Aldo theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- themerex meals & wheelsWordPress Meals & Wheels theme <= 1.1.12 - Local File Inclusion vulnerability8.1 High
- themerex avventureWordPress Avventure theme <= 1.1.12 - Local File Inclusion vulnerability8.1 High
- themerex confixWordPress ConFix theme <= 1.013 - Local File Inclusion vulnerability8.1 High
- themerex quanzoWordPress Quanzo theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- themerex equadioWordPress Equadio theme <= 1.1.3 - Local File Inclusion vulnerability8.1 High
- themerex the qleanWordPress The Qlean theme <= 2.12 - Local File Inclusion vulnerability8.1 High
- themerex ostendeWordPress OsTende theme <= 1.4.3 - Local File Inclusion vulnerability8.1 High
- themerex humanumWordPress Humanum theme <= 1.1.4 - Local File Inclusion vulnerability8.1 High
- radiustheme metroWordPress Metro theme <= 2.13 - Local File Inclusion vulnerability8.1 High
- thembay aoraWordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability8.1 High
- mikado-themes topfit - fitness and gym wordpress themeWordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability8.1 High
- mikado-themes topscorer - sports wordpress themeWordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes apollo | night club, dj event wordpress themeWordPress Apollo | Night Club, DJ Event WordPress Theme theme <= 1.3.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes buzz stone | magazine & viral blog wordpress themeWordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes chronicle - lifestyle magazine & blog wordpress themeWordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes consultor | consulting, accounting & legal counsel wordpress themeWordPress Consultor | Consulting, Accounting & Legal Counsel WordPress Theme theme <= 1.2.4 - Local File Inclusion vulnerability8.1 High
- ancorathemes ekoterra - nonprofit, green energy & ecology themeWordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme <= 1.0.0 - Local File Inclusion vulnerability8.1 High
- dan fisher alchemistsWordPress Alchemists theme <= 4.6.0 - Local File Inclusion vulnerability8.1 High
- axiomthemes ac services | hvac, air conditioning & heating company wordpress themeWordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulnerability8.1 High
- ancorathemes casamia | property rental real estate wordpress themeWordPress CasaMia | Property Rental Real Estate WordPress Theme theme <= 1.1.2 - Local File Inclusion vulnerability8.1 High
- fuelthemes the issueWordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability8.1 High
- elated-themes findallWordPress FindAll theme <= 1.4 - Local File Inclusion vulnerability8.1 High
- ancorathemes feliziaWordPress Felizia theme <= 1.3.4 - Local File Inclusion vulnerability8.1 High
- elated-themes etchyWordPress Etchy theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- mikado-themes wanderlandWordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- elated-themes askkaWordPress Askka theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- themerex hoverexWordPress Hoverex theme <= 1.5.10 - Local File Inclusion vulnerability8.1 High
- select-themes don peppeWordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- select-themes prowessWordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerability8.1 High
- themerex allianceWordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability8.1 High
- launchandsell tribeWordPress Tribe theme <= 1.7.3 - Local File Inclusion vulnerability8.1 High
- elated-themes zentrumWordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes green planetWordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability8.1 High
- ancorathemes playaWordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability8.1 High
- elated-themes helvigWordPress Helvig theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes electroservWordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes crown artWordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability8.1 High
- ancorathemes cloudmeWordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…