CVE-2003-0536 in phpSysInfo

الملخص

بحسب MITRE

Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 09/07/2003
• إفشاء: 18/08/2003
• الاعتدال: تمت الموافقة
• إدخال: VDB-20697
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• استغلال: تحميل
• CVSS: 3.6 (NVD)
• EPSS: 0.01473
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0536
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0536
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0536/