This page is experimental and may change significantly in future releases.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Properties
id: d3f:CWE-98
- name
- Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
- definition
- The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
- synonyms
- RFI
- synonyms
- Remote file include
- synonyms
- Local file inclusion
Neighbors
CWE-98 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-98 has no related weaknesses in this release.