daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2018/CVE-2018-19458.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-06-13 14:55:00 -04:00
parent 266cf675fd
commit 26fb9294fa
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cves/2018/CVE-2018-19458.yaml
View File

@ -4,12 +4,12 @@ info:
name: PHP Proxy 3.0.3 - Local File Inclusion name: PHP Proxy 3.0.3 - Local File Inclusion
author: daffainfo author: daffainfo
severity: high severity: high
description: In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246. description: PHP Proxy 3.0.3 is susceptible to local file inclusion vulnerabilities that allow unauthenticated users to read files from the server via index.php?q=file:/// (a different vulnerability than CVE-2018-19246).
reference: reference:
- https://www.exploit-db.com/exploits/45780 - https://www.exploit-db.com/exploits/45780
- https://www.cvedetails.com/cve/CVE-2018-19458 - https://www.cvedetails.com/cve/CVE-2018-19458
- https://www.exploit-db.com/exploits/45780/
- https://pentest.com.tr/exploits/PHP-Proxy-3-0-3-Local-File-Inclusion.html - https://pentest.com.tr/exploits/PHP-Proxy-3-0-3-Local-File-Inclusion.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-19458
classification: classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5 cvss-score: 7.5
@ -32,3 +32,5 @@ requests:
- type: status - type: status
status: status:
- 200 - 200
# Enhanced by mp on 2022/06/13