Skip to content
8.1 High

CVE-2025-26592 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Lab lab allows PHP Local File Inclusion.This issue affects Lab: from n/a through <= 1.0.0.

Affected products and versions

Product Affected versions Fixed in
Inset 1.18 earliest → 1.18.0 No fix stated
Lab 1.0 earliest → 1.0.0 No fix stated
The 2 CVEs of Inset →
Track this CVE