Lucene search
Redhat.comRH:CVE-2016-5385HistoryJul 18, 2016 - 2:19 p.m.
CVE-2016-5385
2016-07-1814:19:09
redhat.com
access.redhat.com
16
0.936 High
EPSS
Percentile
99.1%
It was discovered that PHP did not properly protect against the HTTP_PROXY variable name clash. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a PHP script to an attacker-controlled proxy via a malicious HTTP request.
Related
nessus
nessus
Fedora 24 : php-guzzlehttp-guzzle (2016-aef8a45afe) (httpoxy)
2016-07-29 00:00:00
RHEL 7 : php (RHSA-2016:1613) (httpoxy)
2016-08-12 00:00:00
Fedora 23 : php-guzzlehttp-guzzle6 (2016-9c8cf5912c) (httpoxy)
2016-07-29 00:00:00
oraclelinux
oraclelinux
php security update
2016-08-11 00:00:00
php security and bug fix update
2016-08-11 00:00:00
php security and bug fix update
2016-11-09 00:00:00
openvas
openvas
Fedora Update for php FEDORA-2016-8eb11666aa
2016-08-04 00:00:00
RedHat Update for php RHSA-2016:1613-01
2016-08-12 00:00:00
RedHat Update for php RHSA-2016:1609-01
2016-08-12 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: php-guzzlehttp-guzzle6-6.2.1-1.fc23
2016-07-29 02:55:08
[SECURITY] Fedora 23 Update: php-guzzlehttp-guzzle-5.3.1-1.fc23
2016-07-29 02:55:03
[SECURITY] Fedora 24 Update: php-guzzlehttp-guzzle6-6.2.1-1.fc24
2016-07-29 00:00:06
friendsofphp
friendsofphp
HTTP Proxy header vulnerability
2018-02-12 19:47:17
HTTP Proxy header vulnerability
2018-02-12 19:47:17
HTTP Proxy header vulnerability
2016-07-18 20:27:36
nvd
nvd
CVE-2016-5385
2016-07-19 02:00:17
CVE-2016-1000100
2016-10-06 14:59:17
github
github
HTTP Proxy header vulnerability
2022-04-07 13:59:22
cve
cve
CVE-2016-5385
2016-07-19 02:00:17
CVE-2016-1000100
2016-10-06 14:59:17
debiancve
debiancve
CVE-2016-5385
2016-07-19 02:00:00
centos
centos
php security update
2016-08-11 21:20:11
php security update
2016-08-12 11:27:56
cvelist
cvelist
CVE-2016-5385
2016-07-19 01:00:00
redhat
redhat
(RHSA-2016:1611) Moderate: php55-php security update
2016-08-11 19:52:52
(RHSA-2016:1612) Moderate: rh-php56-php security update
2016-08-11 19:53:18
(RHSA-2016:1610) Moderate: php54-php security update
2016-08-11 19:51:58
f5
f5
K73071205 : PHP vulnerability CVE-2016-5385
2016-07-26 00:00:00
typo3
typo3
Environment Variable Injection in extension "AWS SDK for PHP" (aws_sdk_php)
2018-08-09 00:00:00
Environment Variable Injection
2016-07-19 00:00:00
prion
prion
Design/Logic Flaw
2016-07-19 02:00:00
Design/Logic Flaw
2016-10-06 14:59:00
ibm
ibm
osv
osv
HTTP Proxy header vulnerability
2022-04-07 13:59:22
php5 - security update
2016-12-16 00:00:00
gitlab
gitlab
HTTP Proxy header vulnerability
2016-07-18 00:00:00
veracode
veracode
Open Redirection
2019-01-15 09:12:46
archlinux
archlinux
drupal: proxy injection
2016-07-21 00:00:00
ubuntucve
ubuntucve
CVE-2016-5385
2016-07-18 00:00:00
slackware
slackware
[slackware-security] php
2016-07-21 23:38:17
cloudfoundry
cloudfoundry
Multiple CVEs: httpoxy | Cloud Foundry
2016-12-21 00:00:00
USN-3045-1 PHP vulnerabilities | Cloud Foundry
2016-09-09 00:00:00
threatpost
threatpost
CGI Script Vulnerability 'Httpoxy' Allows Man-in-the-Middle Attack
2016-07-18 18:00:46
cert
cert
checkpoint_advisories
checkpoint_advisories
impervablog
impervablog
Python and Go Top the Chart of 2019’s Most Popular Hacking Tools
2020-05-27 09:22:21
amazon
amazon
Medium: php55, php56
2016-08-01 13:30:00
debian
debian
[SECURITY] [DSA 3631-1] php5 security update
2016-07-26 20:46:29
[SECURITY] [DLA 749-1] php5 security update
2016-12-16 21:48:18
freebsd
freebsd
php -- multiple vulnerabilities
2016-07-21 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-08-02 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
kitploit
kitploit
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00