Local File Inclusion

2018-12-0309:53:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.007 Low

EPSS

Percentile

80.5%

JSON

php-proxy-app is vulnerable to local file inclusion. The vulnerability exists because str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php uses a weak cryptography to authorize data.

CPENameOperatorVersion
athlon1600/php-proxyle5.1.1

CPE	Name	Operator	Version
	athlon1600/php-proxy	le	5.1.1

References

github.com/Athlon1600/php-proxy-app/issues/134

github.com/Athlon1600/php-proxy-app/issues/139

github.com/eddietcc/CVE-Bins/blob/master/PHP-Proxy/readme.md

0.007 Low

EPSS

Percentile

80.5%

JSON

Related for VERACODE:7925