References https://www.twcert.org.tw/tw/cp-132-7600-dd072-1.html https://cve.imfht.com/detail/CVE-2023-48382 https://www.twcert.org.tw/en/cp-139-7616-4003c-2.html https://security-tracker.debian.org/tracker/CVE-2023-48382 https://softnext-inc.com/news_main.html?pg=3&tag=t2&nid=1107 https://www.nsfocus.net/vulndb/92206 https://avd.aliyun.com/detail?id=AVD-2023-48381 https://dbugs.ptsecurity.com/vulnerability/PT-2023-30809
Related VulnerabilitiesPoCCVE-2026-29962: HSC MailInspector - Local File InclusionPoCCVE-2026-85200: GEO my WP <=4.5.5.3 - Unauthenticated Local File InclusionPoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File DisclosurePoCCVE-2026-26217: Crawl4AI < 0.8.0 - Local File InclusionPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information DisclosurePoCCVE-2025-2505: WordPress Age Gate <= 3.5.3 - Unauthenticated Local File InclusionPoCCVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site ScriptingPoCCVE-2026-34036: Dolibarr <=22.0.4 - Local File InclusionPoCjoomla-com-fabrik-lfi: Joomla! com_fabrik 3.9.11 - Local File InclusionPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionRancher /v3-public/localProviders/local 默认口令漏洞PoCCVE-2024-10763: WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion