Codeworkweb vulnerabilities
We track 2 vulnerabilities in Codeworkweb products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 24, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Codeworkweb vulnerabilities
- 7.5 High severity
Xews Lite: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codeworkweb Xews Lite xews-lite allows PHP Local File Inclusion.This issue affects Xews Lite: from n/a through <= 1.0.9.
- 7.5 High severity
CWW Portfolio: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codeworkweb CWW Portfolio cww-portfolio allows PHP Local File Inclusion.This issue affects CWW Portfolio: from n/a through <= 1.3.1.