Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1jZ2hqLXc0MmctaHFtcs4AAUfe
XSS in PHP-Proxy-App through v3.0
PHP-Proxy-App through 3.0 has Cross-Site Scripting (XSS) via the URL field in index.php.
Permalink: https://github.com/advisories/GHSA-cghj-w42g-hqmrJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jZ2hqLXc0MmctaHFtcs4AAUfe
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: 10 months ago
CVSS Score: 6.1
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Identifiers: GHSA-cghj-w42g-hqmr, CVE-2018-19785
References:
- https://nvd.nist.gov/vuln/detail/CVE-2018-19785
- https://github.com/Athlon1600/php-proxy-app/issues/140
- https://github.com/eddietcc/CVEnotes/blob/master/PHP-Proxy/RADME.md
- https://github.com/Athlon1600/php-proxy-app/commit/f74d9315ded7c05030023efcbedbcb24e8cc3a64
- https://github.com/advisories/GHSA-cghj-w42g-hqmr
Blast Radius: 1.0
Affected Packages
packagist:athlon1600/php-proxy-app
Dependent packages: 0Dependent repositories: 0
Downloads: 13,781 total
Affected Version Ranges: < 3.0
Fixed in: 3.0
All affected versions: 1.0.0, 2.0.0
All unaffected versions: 3.0.0