Approved changes feed: RSS · Atom

cpe:2.3:a:php-proxy:php-proxy:3.0.3:*:*:*:*:*:*:*

part: a version: 3.0.3 update: *

VendorPhp Proxy (40492de2-71e5-51f6-b3ce-0426be00e8bf)
ProductPhp Proxy (de1b1baf-4540-5bea-bd0d-5f2c9423a567)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/dwaaan/php-proxy purl2cpe 2026-06-01 10:11:03.133547
pkg:github/athlon1600/php-proxy-app purl2cpe 2026-06-01 10:11:03.133548

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19458 vulnerable 2026-06-08 05:11:15.765763 Details available
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.
Published: 2018-11-22T20:00:00.000Z
Updated: 2024-09-16T18:03:53.438Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.