CVE-2026-12194 : 상세 정보

CVE-2026-12194

2026-07-04
08h16 +00:00
A03-Injection
2026-07-06
19h43 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

참고 자료