Approved changes feed: RSS · Atom

cpe:2.3:a:anon_proxy_server:anon_proxy_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAnon Proxy Server (d95771d6-4671-59bb-9fc4-1f12a4f0c754)
ProductAnon Proxy Server (02e58220-369c-5cf5-9f72-5d0466d3c807)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/anonproxyserver purl2cpe 2026-06-01 10:13:42.074167

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41357 vulnerable 2026-06-08 07:25:06.867531 Reflected Cross-Site Scripting on Anon Proxy Server
Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'host' parameter in '/diagdns.php' endpoint.
Published: 2026-03-31T08:58:09.091Z
Updated: 2026-03-31T18:04:14.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41356 vulnerable 2026-06-08 07:25:06.866874 Reflected Cross-Site Scripting in Anon Proxy Server
Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'host' parameter in '/diagconnect.php' endpoint.
Published: 2026-03-31T08:53:50.172Z
Updated: 2026-03-31T18:04:20.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41355 vulnerable 2026-06-08 07:25:06.864188 Reflected Cross-Site Scripting on Anon Proxy Server
Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'port' and 'proxyPort' parameters in '/anon.php' endpoint.
Published: 2026-03-31T08:48:28.950Z
Updated: 2026-03-31T18:04:32.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0633 vulnerable 2026-06-08 04:50:17.336082 Details available
Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service (exception) via a user name with a large number of quotes, which triggers the overflow during escaping.
Published: 2008-02-06T20:00:00.000Z
Updated: 2024-08-07T07:54:22.501Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.