PT-2005-1897 · Php · Phpsysinfo

Cxib8O3 + 1 · Published 2005-03-26 · Updated 2017-07-11 · CVE-2005-0869

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpSysInfo version 2.3

Description The issue allows remote attackers to obtain sensitive information via a direct request to certain files, which reveal the path in a PHP error message. Specifically, the affected files include class.OpenBSD.inc.php, class.NetBSD.inc.php, class.FreeBSD.inc.php, class.Darwin.inc.php, XPath.class.php, system header.php, and system footer.php.

Recommendations For phpSysInfo version 2.3, consider restricting direct access to the mentioned files, such as class.OpenBSD.inc.php, class.NetBSD.inc.php, class.FreeBSD.inc.php, class.Darwin.inc.php, XPath.class.php, system header.php, and system footer.php, to prevent the disclosure of sensitive information.

Fix

Related Identifiers

CVE-2005-0869

Affected Products

Phpsysinfo

References · 8

• https://osv.dev/vulnerability/CVE-2005-0869 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0869 · Vendor Advisory
• http://secunia.com/advisories/14690 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0869 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0869 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0869 · Note
• http://marc.info/?l=bugtraq&m=111161017209422&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19808 · Note