PHPSysInfo < 2.4.0 Multiple Vulnerabilities

Medium Nessus Network Monitor Plugin ID 3289

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running PHPSysInfo, a PHP application that gives system information via a web interface. This version of PHPSysInfo is vulnerable to a multitude of flaws. These flaws include Cross-Site Scripting (XSS), HTML injection, and a local file inclusion flaw. There is also an inherent risk whenever system information is displayed via a web interface. Of these flaws, the more serious flaw is the local file inclusion vulnerability. An attacker exploiting this flaw would be able to retrieve and display potentially confidential files (such as /etc/passwd). This can lead to confidential materials being downloaded by anonymous users.

Solution

Upgrade to version 2.4.0 or higher.

See Also

http://www.hardened-php.net/advisory_222005.81.html

Plugin Details

Severity: Medium

ID: 3289

File Name: 3289.prm

Family: CGI

Published: 2005/11/14

Modified: 2016/01/19

Dependencies: 1442

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

CVSSv3

Base Score: 5.6

Temporal Score: 5.4

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:phpsysinfo:phpsysinfo

Reference Information

CVE: CVE-2005-3348, CVE-2005-0870, CVE-2005-3347

BID: 15414, 15396