CVE-2026-12194
2026-07-04
08h16 +00:00
08h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Control of Filename for Include/Require Statement in PHP Program The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions. |
