Fluid Attacks Database

Description

Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	phpsysinfo	>=0 <2.1-1	2.1-1
debian 11	phpsysinfo	>=0 <2.1-1	2.1-1
debian 13	phpsysinfo	>=0 <2.1-1	2.1-1
debian 14	phpsysinfo	>=0 <2.1-1	2.1-1

Aliases

1. CVE-2003-05362. NVD-2003-05363. OSV-DEBIAN-2003-05364. OSV-2003-05365. SECURITY-TRACKER-CVE-2003-0536

References

1. https://www.exploit-db.com/exploits/22459

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.