Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| phpsysinfo/phpsysinfo(Packagist) | 0 | 3.2.5 | N/A |
CVSS Metrics
