phpsysinfo vulnerabilities (Debian)

9 vulnerabilities.

• phpsysinfo Debian phpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoofed X-Forwarded-For / Client-IP headers CVE-2026-55584 Public exploitFix available 7.5 HighAugust 28, 2026
• phpsysinfo Debian Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability CVE-2023-49006 Fix available 6.5 MediumDecember 19, 2023
• phpsysinfo Debian Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows... CVE-2007-4048 Fix available 4.3 MediumJuly 30, 2007
• phpsysinfo Debian phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence CVE-2006-3360 Fix available 5.0 MediumJuly 6, 2006
• phpsysinfo Debian HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in... CVE-2005-3348 Fix available 4.3 MediumNovember 15, 2005
• phpsysinfo Debian Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used... CVE-2005-3347 Fix available 6.8 MediumNovember 15, 2005
• phpsysinfo Debian Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is... CVE-2005-0870 Public exploitFix available 4.3 MediumMarch 26, 2005
• phpsysinfo Debian phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1... CVE-2005-0869 Fix available 5.0 MediumMarch 26, 2005
• phpsysinfo Debian Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write... CVE-2003-0536 Public exploitFix available 3.6 LowJuly 8, 2003