Количество 2
Количество 2
CVE-2018-19246
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion.
GHSA-pc5h-m95g-v6rh
LFI in PHP-Proxy 5.1.0
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-19246 PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion. | CVSS3: 7.5 | 47% Средний | около 7 лет назад |
| GHSA-pc5h-m95g-v6rh LFI in PHP-Proxy 5.1.0 | CVSS3: 7.5 | 47% Средний | больше 3 лет назад |
Уязвимостей на страницу