Hardened PHP Project
www.hardened-php.net
-= Security Advisory =-
Advisory: Multiple vulnerabilities in phpSysInfo
Release Date: 2005/11/13
Last Modified: 2005/11/12
Author: Christopher Kunz <christopher.kunz@hardened-php.net>
Application: phpSysInfo 2.4 and prior
Severity: Cross-Site Scripting, HTTP Response Splitting,
Arbitrary local file inclusion
Risk: Medium
Vendor Status: Vendor has released an updated version.
References: http://www.hardened-php.net/advisory_212005.81.html