CVE-2018-19784

HIGH

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed fo...

Affects 1 product across 1 vendor.

CVSS 3.07.5
EPSS1.1%
Percentile66th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-326: CWE-326
Related Attack Patterns (CAPEC)
CAPEC-20 Encryption Brute Forcing
via CWE-326
CAPEC-112 Brute Force
via CWE-326
CAPEC-192 Protocol Analysis
via CWE-326

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A high severity vulnerability affects Php-Proxy systems (CVE-2018-19784). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-216382-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-19784?
This vulnerability was disclosed in 2018. A high severity vulnerability affects Php-Proxy systems (CVE-2018-19784). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-19784?
CVE-2018-19784 has CVSS 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS: 1.1%.
Is CVE-2018-19784 actively exploited?
No confirmed active exploitation of CVE-2018-19784 as of 2026-09-25.
How do I remediate CVE-2018-19784?
Priority: MEDIUM.
What systems are affected by CVE-2018-19784?
CVE-2018-19784 affects Php-Proxy Php-Proxy.
Vulnerability Details
CVE IDCVE-2018-19784
BSIDBS-2018-GLOBAL-216382-H BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published2018-12-01
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
CWE-326
SourceNVD
Official Description

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Php-Proxy Php-Proxy 5.1.0
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2876 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash3fcddf28fd2ebc6abb1993d5a9e2f3a98d2e823e66f9ae674dbb59f1cc4473dacb671db37aa109f4e1878c39a8f263864ea20759919f529dfd64767ace8384d8
Related CVEs affecting Php-Proxy
CVE-2018-19246 7.5 PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "p... CVE-2018-19458 7.5 In PHP Proxy 3.0.3, any user can read files from the server without authentic... CVE-2018-19785 6.1 PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in i...
View all Php-Proxy CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →