### [CVE-2022-4446](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4446) ![](https://img.shields.io/static/v1?label=Product&message=tsolucio%2Fcorebos&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=%3C%208.0%20&color=brighgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-98%20Improper%20Control%20of%20Filename%20for%20Include%2FRequire%20Statement%20in%20PHP%20Program%20('PHP%20Remote%20File%20Inclusion')&color=brighgreen) ### Description PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0. ### POC #### Reference - https://huntr.dev/bounties/718f1be6-3834-4ef2-8134-907a52009894 - https://huntr.dev/bounties/718f1be6-3834-4ef2-8134-907a52009894 #### Github No PoCs found on GitHub currently.