CVE-2018-11031: Gouguoyin Phprap

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an api[url]=file:////etc/passwd&api[method]=get POST request.

Affected products

• Gouguoyin Phprap: from 1.0.4, up to and including 1.0.8

Published 2018-05-14. Last modified 2026-06-17.