application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwdmethod=get POST request...
10CVSS7AI score0.01961EPSS
SaveExploits1References1
OSV•added 2018/05/14 12:29 a.m.•5 views
CVE-2018-11032
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...