TI-2026-40123 CVE-2026-55584 · GHSA-786w-p5pm-cvgh
phpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoofed X-Forwarded-For / Client-IP headers
Priority MEDIUM 43
phpSysInfo is a customizable PHP script that displays system information.
phpsysinfo
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
phpsysinfo records in CISA KEVNo phpsysinfo vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2006-03258 CVE-2006-3360 · GHSA-2wxv-3g4v-p76p
Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote…
Priority LOW 31
Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a ..
TI-2005-00812 CVE-2005-0869 · GHSA-76ph-wfwc-34jh
phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct…
Priority LOW 31
phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php…
TI-2023-26715 CVE-2023-49006 · GHSA-67gv-xrw7-p72w
Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a…
Priority LOW 29
Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a crafted page in the XML.php file.
TI-2005-00813 CVE-2005-0870 · GHSA-m488-92rv-23cc
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when…
Priority LOW 26
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2…
TI-2005-03173 CVE-2005-3348 · GHSA-m952-67ch-qff2
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used…
Priority LOW 24
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web c…
TI-2007-03917 CVE-2007-4048 · GHSA-fgr3-8fgg-jjgv
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
TI-2003-00504 CVE-2003-0536 · GHSA-wpq2-454x-8hm4
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with…
Priority LOW 20
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via ..