CVE-2018-19784: PHP-Proxy

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

Affected products

• PHP-Proxy PHP-Proxy: version 5.1.0 only

Published 2018-12-01. Last modified 2026-06-17.