https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:52:27 +0000 https://cve.radiocsirt.org/vuln/cve-2016-5385 <p>PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application&#39;s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(&#39;HTTP_PROXY&#39;) call or (2) a CGI configuration of PHP, aka an &#34;httpoxy&#34; issue.</p> <p>PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application&#39;s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(&#39;HTTP_PROXY&#39;) call or (2) a CGI configuration of PHP, aka an &#34;httpoxy&#34; issue.</p> https://cve.radiocsirt.org/vuln/cve-2016-5385