GCVE - cpe:2.3:a:phpsysinfo:phpsysinfo:2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpsysinfo:phpsysinfo:2.1:*:*:*:*:*:*:*

part: a version: 2.1 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:composer/phpsysinfo/phpsysinfo`	purl2cpe	2026-06-01 10:16:39.287069
`pkg:github/phpsysinfo/phpsysinfo`	purl2cpe	2026-06-01 10:16:39.287071

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3348`	vulnerable	2026-06-08 04:48:40.408543	Details available HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter. Published: 2005-11-18T02:00:00.000Z Updated: 2024-08-07T23:10:08.487Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17616 http://www.mandriva.com/security/advisories?name=MDKSA-2005:212 http://www.securityfocus.com/bid/15396 http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml http://www.securityfocus.com/bid/15414	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0536`	vulnerable	2026-06-08 04:47:21.759624	Details available Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters. Published: 2003-07-10T04:00:00.000Z Updated: 2024-08-08T01:58:11.103Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=105128606513226&w=2 http://www.debian.org/security/2003/dsa-346 http://sourceforge.net/tracker/index.php?func=detail&aid=670222&group_id=15&atid=100015	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.