CVE-2003-0536 describes a directory traversal vulnerability in phpSysInfo versions 2.1 and earlier. This flaw allows an attacker with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service by manipulating the 'template' or 'lng' parameters with dot-dot sequences. The vulnerability has a CVSS score of 3.6, indicating low severity with local access required and potential for partial confidentiality and availability impact. While not actively exploited in the wild (no KEV entry), an exploit for file disclosure is available on ExploitDB, and there is minimal community discussion or media coverage surrounding this older CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0CPE matchmatch criteria | cpe:2.3:a:phpsysinfo:phpsysinfo:2.0:*:*:*:*:*:*:* | ||
2.1CPE matchmatch criteria | cpe:2.3:a:phpsysinfo:phpsysinfo:2.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.