CVE-2003-0536
phpsysinfo - directory traversal
EPSS 1.5%
Description
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters.
How to fix CVE-2003-0536
To remediate CVE-2003-0536, upgrade the affected package to a fixed version below.
- Debian/phpsysinfo—upgrade to 2.1-1 or later
Is CVE-2003-0536 being exploited?
Low — EPSS is 1.5%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2.1-1