Directory Traversal Vulnerability in phpSysInfo by phpSysInfo
CVE-2003-0536

Currently unrated

Key Information:

Vendor: PHPsysinfo
Status: PHPsysinfo
Vendor: CVE Published:; 18 August 2003

What is CVE-2003-0536?

The directory traversal vulnerability in phpSysInfo versions 2.1 and earlier enables attackers with write access to manipulate the template or lng parameters using '..' sequences. This manipulation allows unauthorized access to sensitive files on the server, potentially exposing critical data. Additionally, it may lead to denial of service by disrupting the functionality of the application, highlighting a serious flaw in the application’s design to secure file paths.

References

http://marc.info/?l=bugtraq&m=105128606513226&w=2

mailing-listx_refsource_BUGTRAQ

http://www.debian.org/security/2003/dsa-346

vendor-advisoryx_refsource_DEBIAN

http://sourceforge.net/tracker/index.php?func=detail&aid=...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 18, 2003
Vulnerability Reserved
Jul 9, 2003

CVE-2003-0536 Data

JSON

PHPsysinfo

What is CVE-2003-0536?

References

Timeline