Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2004-2595

Malware in sbrugna...

4.3CVSS6.2AI score0.00498EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-0551

Malware in sbrugna...

6.8CVSS6.4AI score0.01009EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-22144

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.00263EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/07/23 12:57 a.m.4 views

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

9.1CVSS7.2AI score0.00263EPSS
Exploits0References1
NVD
NVD
added 2025/07/21 8:15 p.m.3 views

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

9.1CVSS0.00263EPSS
Exploits0References2
OSV
OSV
added 2025/07/21 8:15 p.m.0 views

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

9.1CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2025/07/21 12:0 a.m.6 views

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

0.00263EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.1 views

PT-2025-30336 · Phproxy · Phproxy

Name of the Vulnerable Software and Affected Versions: PHProxy versions prior to 1.1.1 Description: A Server-Side Request Forgery SSRF issue exists in the URL processing functionality. Insufficient input validation for the proxurl parameter allows a remote, unauthenticated attacker to submit a...

9.1CVSS6.4AI score0.00263EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

phproxy 安全漏洞

phproxy is a PHP-based web proxy software from PHProxy open source. A security vulnerability exists in phproxy 1.1.1 and earlier versions, which stems from insufficient validation of the proxurl parameter input and could lead to a server-side request forgery attack...

9.1CVSS6.6AI score0.00263EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/07/21 12:0 a.m.3 views

CVE-2025-52362

Server-Side Request Forgery SSRF vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL...

6.6AI score0.00263EPSS
Exploits0References2
CVE
CVE
added 2025/07/21 12:0 a.m.14 views

CVE-2025-52362

PHProxy is affected by a Server-Side Request Forgery (SSRF) vulnerability in the URL processing functionality up to version 1.1.1. The issue arises from insufficient input validation of the _proxurl parameter, enabling a remote, unauthenticated attacker to submit a crafted URL. Severity is indica...

9.1CVSS7AI score0.00263EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2007/01/30 12:0 a.m.111 views

PHProxy Detection

The remote host is running PHProxy, a PHP-based HTTP proxy intended to bypass firewall and other proxy restrictions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid24261; scriptversion"1.12";...

5.5AI score
Exploits0
NVD
NVD
added 2007/01/29 5:28 p.m.7 views

CVE-2007-0553

Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...

6.8CVSS5.6AI score0.01009EPSS
Exploits0References4
Cvelist
Cvelist
added 2007/01/29 5:0 p.m.13 views

CVE-2007-0553

Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...

5.6AI score0.01009EPSS
Exploits0References4
CVE
CVE
added 2007/01/29 5:0 p.m.39 views

CVE-2007-0553

PHProxy (index.inc.php) is affected by multiple XSS vulnerabilities in versions before 0.5 beta 2, allowing remote attackers to inject arbitrary script/HTML via the data[realm] and _url parameters (distinct from CVE-2004-2604). The entry provides concrete vectors and references; exploitation stat...

6.8CVSS5.7AI score0.01009EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2005/11/29 2:0 a.m.13 views

CVE-2004-2604

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

5.6AI score0.00498EPSS
Exploits1References4
CVE
CVE
added 2005/11/29 2:0 a.m.41 views

CVE-2004-2604

CVE-2004-2604 affects PHProxy’s index.php: XSS vulnerability exploitable via the error parameter that allows remote injection of arbitrary web script/HTML. The issue is documented across multiple sources (NVD, CVE lists, OSVDB/SecurityFocus references) with a base score of 4.3 (Medium) per NVD CV...

4.3CVSS5.7AI score0.00498EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.21 views

PHProxy XSS Vulnerability

PHProxy is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.8AI score0.00498EPSS
Exploits1References1
NVD
NVD
added 2004/12/31 5:0 a.m.8 views

CVE-2004-2604

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

4.3CVSS5.6AI score0.00498EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2004/12/28 12:0 a.m.24 views

PHProxy index.php error Parameter XSS

Binary data 2480.prm...

4.3CVSS7.3AI score0.00498EPSS
Exploits1References1
Rows per page
Query Builder