24 matches found
EUVD-2004-2595
Malware in sbrugna...
EUVD-2007-0551
Malware in sbrugna...
EUVD-2025-22144
Malicious code in bioql PyPI...
CVE-2025-52362
Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...
CVE-2025-52362
Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...
CVE-2025-52362
Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...
CVE-2025-52362
Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...
PT-2025-30336 · Phproxy · Phproxy
Name of the Vulnerable Software and Affected Versions: PHProxy versions prior to 1.1.1 Description: A Server-Side Request Forgery SSRF issue exists in the URL processing functionality. Insufficient input validation for the proxurl parameter allows a remote, unauthenticated attacker to submit a...
CVE-2025-52362
A Server-Side Request Forgery (SSRF) vulnerability exists in the PHProxy web proxy software (version 1.1.1 and prior). The root cause is insufficient input validation for the _proxurl parameter during URL processing. This flaw allows a remote, unauthenticated attacker to submit a specially crafte...
phproxy 安全漏洞
phproxy is a PHP-based web proxy software from PHProxy open source. A security vulnerability exists in phproxy 1.1.1 and earlier versions, which stems from insufficient validation of the proxurl parameter input and could lead to a server-side request forgery attack...
CVE-2025-52362
Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...
CVE-2025-52362: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...
PHProxy Detection
The remote host is running PHProxy, a PHP-based HTTP proxy intended to bypass firewall and other proxy restrictions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid24261; scriptversion"1.12";...
CVE-2007-0553
Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...
CVE-2007-0553
Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...
CVE-2007-0553
PHProxy (index.inc.php) is affected by multiple XSS vulnerabilities in versions before 0.5 beta 2, allowing remote attackers to inject arbitrary script/HTML via the data[realm] and _url parameters (distinct from CVE-2004-2604). The entry provides concrete vectors and references; exploitation stat...
CVE-2007-0553: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...
CVE-2004-2604
Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2004-2604
CVE-2004-2604 affects PHProxy’s index.php: XSS vulnerability exploitable via the error parameter that allows remote injection of arbitrary web script/HTML. The issue is documented across multiple sources (NVD, CVE lists, OSVDB/SecurityFocus references) with a base score of 4.3 (Medium) per NVD CV...
CVE-2004-2604: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...