CVE-2025-27264

HIGH

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PH...

Affects 0 products across 3 vendors.

CVSS 3.17.5
EPSS0.8%
Percentile57th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, high complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-98: CWE-98
Related Attack Patterns (CAPEC)
CAPEC-193 PHP Remote File Inclusion
via CWE-98

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A PHP Local File Inclusion (LFI) vulnerability exists in the Creativeitem Doctor Appointment Booking software, versions up to and including 1.0.0, due to improper control of filenames in include/require statements.

BSID: BS-2025-GLOBAL-248805-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-27264?
A PHP Local File Inclusion (LFI) vulnerability exists in the Creativeitem Doctor Appointment Booking software, versions up to and including 1.0.0, due to improper control of filenames in include/require statements.
What is the CVSS score for CVE-2025-27264?
CVE-2025-27264 has CVSS 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.8%.
Is CVE-2025-27264 actively exploited?
No confirmed active exploitation of CVE-2025-27264 as of 2026-09-25.
How do I remediate CVE-2025-27264?
Priority: HIGH.
What systems are affected by CVE-2025-27264?
CVE-2025-27264 affects Booking; Creativeitem; Program.
Vulnerability Details
CVE IDCVE-2025-27264
BSIDBS-2025-GLOBAL-248805-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2025-03-03
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
CWE-98
SourceNVD
Official Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through <= 1.0.0.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by manipulating the filename parameter in a request to include and execute arbitrary local PHP files on the server, potentially leading to remote code execution.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Booking — —
Creativeitem — —
Program — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 591 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashd71100580af1ff0f875fb0b8f4393f3d6ac531c7b50a68fa5cb48b71d133d78e5bc17d452da64adef4cf4f4dcea12b67d2089e44672333f9996df3abb7544335
Related CVEs affecting Booking
CVE-2024-31115 10.0 Unrestricted Upload of File with Dangerous Type vulnerability in QuanticaLabs... CVE-2025-7634 9.8 The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin fo... CVE-2026-6960 9.8 The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file upl... CVE-2026-27095 9.8 Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket ... CVE-2026-27389 9.8 Authentication Bypass Using an Alternate Path or Channel vulnerability in des...
View all Booking CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →