Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Talemy Spirit Framework allows PHP Local File Inclusion.This issue affects Spirit Framework: from n/a through 1.2.13.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2024-54263 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Talemy Spirit Framework allows PHP Local File… https://www.cve.org/CVERecord?id=CVE-2024-54263
Post summary
Briefly references CVE-2024-54263 as an improper filename control issue in a PHP framework, but provides no further exploitation, mitigation, or PoC details.
CVE-2024-54263 PHP Local File Inclusion Vulnerability in Talemy Spirit Framework Through Version 1.2.13 https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-54263
Post summary
A PHP Local File Inclusion vulnerability (CVE‑2024‑54263) has been disclosed for Talemy Spirit Framework through v1.2.13, with no PoC, exploit, or patch details provided.