We have the following three tags:
file-inclusion, 36 questions:
A remote code execution attack where user input is used to build the path of code files to be executed, allowing an attacker to control which code is executed. Most commonly affects web applications that rely on a scripting run time, most commonly PHP.
lfi, 9 questions, no guidance.
local-file-inclusion, 1 question:
Local File Inclusion (also known as LFI) allows an attacker to include files in server-side through the web browser. LFI is commonly found to affect web applications that rely on a scripting runtime. This occurs mainly due to a bad input validation mechanism, wherein the user’s input is passed to the file include commands without proper validation.
I feel like these should not be three but two or one. Any suggestions for what to make a synonym of what and what usage quidance to use?