phpsysinfo records
7 published records for vendor phpsysinfo.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2023-49006No exploit | Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a cphpsysinfo · phpsysinfo · CWE-352 | Medium6.5 | — | 0.5% | Dec 19, 2023 |
22Monitor | CVE-2006-3360No exploit | Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files viaphpsysinfo · phpsysinfo · CWE-22 | Medium5.0 | — | 5.5% | Jul 6, 2006 |
22Monitor | CVE-2005-0869No exploit | phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.iphpsysinfo · phpsysinfo | Medium5.0 | — | 5.1% | May 2, 2005 |
18Monitor | CVE-2005-0870Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arphpsysinfo · phpsysinfo | Medium4.3 | — | 3.7% | May 2, 2005 |
18Monitor | CVE-2005-3348No exploit | HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupwarephpsysinfo · phpsysinfo · CWE-352 | Medium4.3 | — | 1.9% | Nov 17, 2005 |
17Monitor | CVE-2007-4048No exploit | Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web scphpsysinfo · phpsysinfo | Medium4.3 | — | 1.3% | Jul 30, 2007 |
14Monitor | CVE-2003-0536Proof of concept | Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary fiphpsysinfo · phpsysinfo | Low3.6 | — | 1.4% | Aug 18, 2003 |
- CVE-2023-4900626Monitor
Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a c
MediumCVSS 6.5No exploitEPSS 0%phpsysinfo · phpsysinfoDec 19, 2023
- CVE-2006-336022Monitor
Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via
MediumCVSS 5.0No exploitEPSS 5%phpsysinfo · phpsysinfoJul 6, 2006
- CVE-2005-086922Monitor
phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.i
MediumCVSS 5.0No exploitEPSS 5%phpsysinfo · phpsysinfoMay 2, 2005
- CVE-2005-087018Monitor
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject ar
MediumCVSS 4.3Proof of conceptEPSS 3%phpsysinfo · phpsysinfoMay 2, 2005
- CVE-2005-334818Monitor
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware
MediumCVSS 4.3No exploitEPSS 1%phpsysinfo · phpsysinfoNov 17, 2005
- CVE-2007-404817Monitor
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web sc
MediumCVSS 4.3No exploitEPSS 1%phpsysinfo · phpsysinfoJul 30, 2007
- CVE-2003-053614Monitor
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary fi
LowCVSS 3.6Proof of conceptEPSS 1%phpsysinfo · phpsysinfoAug 18, 2003