CVE-2003-0536
phpsysinfo - directory traversal
EPSS 0.74%
Description
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters.
How to fix CVE-2003-0536
To remediate CVE-2003-0536, upgrade the affected package to a fixed version below.
- Debian/phpsysinfo—upgrade to 2.1-1 or later
- Debian/phpsysinfo—upgrade to 2.0-3woody1 or later
Is CVE-2003-0536 being exploited?
Low — EPSS is 0.7%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 2.1-1
- from 0, < 2.0-3woody1