Approved changes feed: RSS · Atom

cpe:2.3:a:phpsysinfo:phpsysinfo:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

VendorPhpsysinfo (d5273da7-32e7-58df-80bb-c471e47ca633)
ProductPhpsysinfo (319b1aa3-9d39-58f6-8fc0-337b064f380a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/phpsysinfo/phpsysinfo purl2cpe 2026-06-01 10:16:39.288406
pkg:github/phpsysinfo/phpsysinfo purl2cpe 2026-06-01 10:16:39.288407

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3348 vulnerable 2026-06-08 04:48:40.409076 Details available
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
Published: 2005-11-18T02:00:00.000Z
Updated: 2024-08-07T23:10:08.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0870 vulnerable 2026-06-08 04:48:13.864197 Details available
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php.
Published: 2005-03-26T05:00:00.000Z
Updated: 2024-08-07T21:28:28.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0869 vulnerable 2026-06-08 04:48:13.863734 Details available
phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php, (6) system_header.php, or (7) system_footer.php, which reveal the path in a PHP error message.
Published: 2005-03-26T05:00:00.000Z
Updated: 2024-08-07T21:28:28.818Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.