https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-19785.htmlhttps://patchthecve.com/cve/CVE-2018-19785.htmlWed, 17 Jun 2026 01:49:52 +0000MEDIUM 6.1: PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.https://patchthecve.com/cve/CVE-2018-19784.htmlhttps://patchthecve.com/cve/CVE-2018-19784.htmlWed, 17 Jun 2026 01:49:52 +0000HIGH 7.5: The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.https://patchthecve.com/cve/CVE-2018-19458.htmlhttps://patchthecve.com/cve/CVE-2018-19458.htmlWed, 17 Jun 2026 01:49:20 +0000HIGH 7.5: In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.