GCVE - cpe:2.3:a:phpsysinfo:phpsysinfo:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpsysinfo:phpsysinfo:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:composer/phpsysinfo/phpsysinfo`	purl2cpe	2026-06-01 10:16:39.284298
`pkg:github/phpsysinfo/phpsysinfo`	purl2cpe	2026-06-01 10:16:39.284300

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-4048`	vulnerable	2026-06-08 04:49:55.604432	Details available Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Published: 2007-07-30T16:00:00.000Z Updated: 2024-08-07T14:37:06.090Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/474756/100/0/threaded http://sourceforge.net/project/shownotes.php?release_id=532143 http://download.phpgroupware.org/ http://www.securityfocus.com/bid/25090 http://secunia.com/advisories/26473	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3360`	vulnerable	2026-06-08 04:49:09.003766	Details available Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists. Published: 2006-07-06T00:00:00.000Z Updated: 2024-08-07T18:23:21.270Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016440 https://exchange.xforce.ibmcloud.com/vulnerabilities/27527 http://www.vupen.com/english/advisories/2006/2668 http://www.osvdb.org/27015 http://secunia.com/advisories/20939	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.