cve/2023/CVE-2023-4195.md

### [CVE-2023-4195](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4195)
![](https://img.shields.io/static/v1?label=Product&message=cockpit-hq%2Fcockpit&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=unspecified%3C%202.6.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-98%20Improper%20Control%20of%20Filename%20for%20Include%2FRequire%20Statement%20in%20PHP%20Program%20('PHP%20Remote%20File%20Inclusion')&color=brighgreen)

### Description

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

### POC

#### Reference
- https://huntr.dev/bounties/0bd5da2f-0e29-47ce-90f3-06518656bfd6
- https://huntr.dev/bounties/0bd5da2f-0e29-47ce-90f3-06518656bfd6

#### Github
No PoCs found on GitHub currently.