TI-2018-14008 CVE-2018-19785 · GHSA-cghj-w42g-hqmr
PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.
Priority LOW 29
PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.
Vulnerabilities
4 records
TI-2018-14007 CVE-2018-19784 · GHSA-4wgf-9x5r-p938
The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy…
Priority LOW 35
The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.
TI-2018-13779 CVE-2018-19458 · GHSA-3x3m-p2wx-g7cw
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to…
Priority MEDIUM 58
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.
TI-2018-13660 CVE-2018-19246 · GHSA-pc5h-m95g-v6rh
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed…
Priority MEDIUM 52
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used.