Lucene search
Veracode Vulnerability DatabaseVERACODE:7874HistoryNov 23, 2018 - 2:24 a.m.
Local File Inclusion (LFI)
2018-11-2302:24:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.033 Low
EPSS
Percentile
91.4%
athlon1600/php-proxy-app is vulnerable to local file inclusion (LFI) attacks. The vulnerability exists due to the ability to include file:/// in the value of q, which allows unauthenticated users to read local files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| athlon1600/php-proxy-app | le | 3.0.0 |
References
Related
gitlab
gitlab
Improper Authentication
2018-11-22 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Proxy Arbitrary File Read (CVE-2018-19458)
2021-04-21 00:00:00
prion
prion
Authentication flaw
2018-11-22 20:29:00
nuclei
nuclei
PHP Proxy 3.0.3 - Local File Inclusion
2021-08-02 23:20:58
nvd
nvd
CVE-2018-19458
2018-11-22 20:29:00
github
github
Unauthenticated File Read in PHP Proxy
2022-05-14 01:48:04
cvelist
cvelist
CVE-2018-19458
2022-10-03 16:21:57
osv
osv
Unauthenticated File Read in PHP Proxy
2022-05-14 01:48:04
cve
cve
CVE-2018-19458
2022-10-03 16:21:57