CVE-2018-19784 Weak Cryptography in PHP-Proxy
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| athlon1600/php-proxy(Packagist) | <= 5.1.0 | No fix listed |
| athlon1600/php-proxy(Packagist) | = 1.0.0 | No fix listed |
| athlon1600/php-proxy(Packagist) | = 3.0.0 | No fix listed |
| athlon1600/php-proxy(Packagist) | = 4.0.2 | No fix listed |
| athlon1600/php-proxy(Packagist) | = v5.0.1 | No fix listed |
| athlon1600/php-proxy(Packagist) | = v5.0.2 | No fix listed |
| athlon1600/php-proxy(Packagist) | = v5.0.3 | No fix listed |
| athlon1600/php-proxy(Packagist) | = v5.0.4 | No fix listed |
| athlon1600/php-proxy(Packagist) | = v5.0.5 | No fix listed |
| php-proxy | = 5.1.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit third-party-advisory
- github.com
- github.com product
- github.com
- github.com exploit third-party-advisory