CVE-2018-19784

PoC ×2—

CVSS 3.0

7.5 high

EPSS

1%p65

Published

Dec 1, 2018 (Dec 1, 2018)

Modified

Jun 17, 2026

Description

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

Vendors: php-proxy
Products: php-proxy
Weakness: CWE-326
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.