Lucene search
HistoryAug 18, 2003 - 4:00 a.m.
CVE-2003-0536
phpsysinfo
vulnerability
directory traversal
cve-2003-0536
nvd
denial of service
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.8%
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via … (dot dot) sequences in the (1) template or (2) lng parameters.
Affected configurations
Node
phpsysinfophpsysinfoMatch2.0
ORphpsysinfophpsysinfoMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpsysinfo:phpsysinfo | phpsysinfo | eq | 2.0 |
| phpsysinfo:phpsysinfo | phpsysinfo | eq | 2.1 |
Related
debian
debian
[SECURITY] [DSA-346-1] New phpsysinfo packages fix directory traversal
2003-07-09 02:27:27
openvas
openvas
Debian Security Advisory DSA 346-1 (phpsysinfo)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200311-07 (phpSysInfo)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200311-07 (phpSysInfo)
2008-09-24 00:00:00
gentoo
gentoo
phpSysInfo: arbitrary code execution and directory traversal
2003-11-22 00:00:00
nessus
nessus
Debian DSA-346-1 : phpsysinfo - directory traversal
2004-09-29 00:00:00
phpSysInfo < 2.4.1 Multiple Vulnerabilities
2005-11-16 00:00:00
osv
osv
phpsysinfo - directory traversal
2003-07-08 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA-346-1] New phpsysinfo packages fix directory traversal
2003-07-10 00:00:00
[Full-disclosure] Advisory 22/2005: Multiple vulnerabilities in phpSysInfo
2005-11-14 00:00:00
nvd
nvd
CVE-2003-0536
2003-08-18 04:00:00
CVE-2005-3347
2005-11-18 02:02:00
debiancve
debiancve
CVE-2003-0536
2003-08-18 04:00:00
CVE-2005-3347
2005-11-18 02:02:00
cvelist
cvelist
CVE-2003-0536
2003-07-10 04:00:00
CVE-2005-3347
2005-11-18 02:00:00
ubuntucve
ubuntucve
CVE-2005-3347
2005-11-18 00:00:00
cve
cve
CVE-2005-3347
2005-11-18 02:02:00
packetstorm
packetstorm
Hardened-PHP Project Security Advisory 2005-21.81
2005-11-15 00:00:00
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.8%
Related for CVE-2003-0536