What’s Vulnerable › Vulnerabilities

CVE-2018-19784

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-01 · updated 2026-06-17
• Weakness: CWE-326

Description

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

Affected products

• Php-Proxy: 5.1.0

References

• https://github.com/Athlon1600/php-proxy-app/issues/139
• https://github.com/eddietcc/CVE-Bins/blob/master/PHP-Proxy/readme.md
• https://github.com/Athlon1600/php-proxy-app/issues/139
• https://github.com/eddietcc/CVE-Bins/blob/master/PHP-Proxy/readme.md

Get alerted when CVE-2018-19784 or the next vulnerability affects your stack