Login Request a demo
PH
Product
Phprap
by Gouguoyin · last CVE May 14, 2018
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 2High 0Medium 0Low 0
Severity
All severities2Critical2High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Phprap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11032
9.8
1%
May 14
PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search() function
Affected: 1.0.4 through 1.0.8
CVE-2018-11031
9.8
2%
May 14
application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an api[url]=file:////etc/passwd&api[method]=get POST request
Affected: 1.0.4 through 1.0.8
Showing 2