CVE-2018-19785 XSS in PHP-Proxy-App through v3.0
MediumCVSS 6.1
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| athlon1600/php-proxy-app(Packagist) | < 3.0 | 3.0 |
| athlon1600/php-proxy-app(Packagist) | = 1.0.0 | No fix listed |
| athlon1600/php-proxy-app(Packagist) | = 2.0.0 | No fix listed |
| php-proxy | <= 5.1.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit third-party-advisory
- github.com patch
- github.com exploit third-party-advisory
- github.com