Lucene search
GoogleOSV:GHSA-PC5H-M95G-V6RHHistoryMay 14, 2022 - 1:48 a.m.
LFI in PHP-Proxy 5.1.0
2022-05-1401:48:51
Google
osv.dev
7
0.867 High
EPSS
Percentile
98.6%
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default “pre-installed version” (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion.
Related
veracode
veracode
Local File Inclusion
2018-11-14 08:42:40
prion
prion
Authorization
2018-11-13 09:29:00
Authentication flaw
2018-11-22 20:29:00
packetstorm
packetstorm
PHP-Proxy 5.1.0 Local File Inclusion
2018-11-15 00:00:00
nvd
nvd
CVE-2018-19246
2018-11-13 09:29:00
CVE-2018-19458
2018-11-22 20:29:00
cvelist
cvelist
CVE-2018-19246
2018-11-13 07:00:00
CVE-2018-19458
2022-10-03 16:21:57
gitlab
gitlab
Information Exposure
2018-11-13 00:00:00
zdt
zdt
PHP-Proxy 5.1.0 - Local File Inclusion Vulnerability
2018-11-16 00:00:00
github
github
LFI in PHP-Proxy 5.1.0
2022-05-14 01:48:51
Unauthenticated File Read in PHP Proxy
2022-05-14 01:48:04
cve
cve
CVE-2018-19246
2018-11-13 09:29:00
CVE-2018-19458
2022-10-03 16:21:57
checkpoint_advisories
checkpoint_advisories
PHP-Proxy Information Disclosure (CVE-2018-19246)
2020-06-25 00:00:00
exploitpack
exploitpack
PHP-Proxy 5.1.0 - Local File Inclusion
2018-11-15 00:00:00
nuclei
nuclei
PHP Proxy 3.0.3 - Local File Inclusion
2021-08-02 23:20:58
exploitdb
exploitdb
PHP-Proxy 5.1.0 - Local File Inclusion
2018-11-15 00:00:00
osv
osv
Unauthenticated File Read in PHP Proxy
2022-05-14 01:48:04