Weak Cryptography in PHP-Proxy

HIGH 7.5CVE-2018-19784 · GHSA-4wgf-9x5r-p938 · Published 01/12/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
athlon1600/php-proxy Packagist	`≤ 5.1.0`	No fix yet
php-proxy php-proxy	`= 5.1.0`	No fix yet

Description

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2018-19784 · ADVISORY
Athlon1600/php-proxy-app · WEB
0xUhaw/CVE-Bins · WEB
Athlon1600/php-proxy · PACKAGE
eddietcc/CVE-Bins · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free