HTTP: PHP Proxy Local File Inclusion
This signature detects attempts to exploit a known vulnerability against Php Proxy 5.1.0. A successful attack can lead to local file inclusion.
Extended Description
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion.
Affected Products
Php-proxy php-proxy
References
CVE: CVE-2018-19246
Short Name
HTTP:PHP:PHP-PROXY-LFI
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2018-19246 File Inclusion Local PHP Proxy
Release Date
04/14/2020
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3805
False Positive
Rarely
Vendors
Php-proxy
CVSS Score
5.0