CVE-2018-19458

PoC ×2—

CVSS 3.0

7.5 high

EPSS

33%p98

Published

Nov 22, 2018 (Nov 22, 2018)

Modified

Jun 17, 2026

Description

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.

Vendors: php-proxy
Products: php-proxy
Weakness: CWE-287
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (32.9%)

In the news0 stories

No ingested article mentions this CVE yet.