CVE-2018-19458

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than…

published November 22, 2018

CVSS
—
EPSS
33%
Percentile
98.4
In the wild
Unconfirmed
What it is

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.32885 · 98.4th percentile
Published
2018-11-22T20:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 33% → 14%
    epss
  • 06 SEP 03:11Z
    EPSS moved 33% → 14%
    epss
  • 30 AUG 16:01Z
    EPSS moved 14% → 33%
    epss
  • 29 AUG 04:36Z
    EPSS moved 33% → 14%
    epss
  • 22 NOV 20:00Z
    In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than…
    cvelistv5