PatchTheCVEphprap vulnerabilities and fixes
Recent CVEs affecting phprap, with upgrade or downgrade steps. 2 tracked.
phprap has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2018-05-14. Highest priority: CVE-2018-11031 (score 64/100).
- CVE-2018-11032 CRITICAL 9.8 UPGRADE PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search() function
- CVE-2018-11031 CRITICAL 9.8 UPGRADE application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrat
FAQ
How do I fix phprap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phprap being exploited right now?
None of the tracked phprap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phprap CVE should I patch first?
CVE-2018-11031 currently ranks highest (64/100): application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrat.