high7.5Public exploit code
CVE-2018-19458
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Proxy 3.0.3 - Local File Inclusion2018-11-05 · webapps · php
Impact
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php-Proxy | Php-Proxy | Version 3.0.3 |