8.1
Élevée
CVE-2025-64373 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in shinetheme Traveler traveler allows PHP Local File Inclusion.This issue affects Traveler: from n/a through < 3.2.6.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Traveler 3.2 | premières → 3.2.6 | Pas de correctif indiqué |
Autres CVE de Traveler
Les 15 CVE de Traveler →
CVE-2026-93947
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme…
9.3
Critique
CVE-2026-25449
Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue…
9.8
Critique
CVE-2026-24367
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme…
8.5
Élevée
CVE-2025-67917
Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access…
6.5
Moyenne