CVE-2007-4048: phpsysinfo

EPSS trend

Probability

1.32%

Chance of exploitation in the next 30 days

Percentile

70%

Versus all other CVEs

30-day change

0.00 pp

From 1.32% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.32%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

www.securityfocus.com/archive/1/474756/100/0/threadedMailing ListX Refsource BUGTRAQ
sourceforge.net/project/shownotes.php?release_id=532143X Refsource CONFIRM
download.phpgroupware.orgX Refsource CONFIRM
www.securityfocus.com/bid/25090VDB EntryX Refsource BID
secunia.com/advisories/26473Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26248Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securityreason.com/securityalert/2952Third Party AdvisoryX Refsource SREASON
osvdb.org/36601VDB EntryX Refsource OSVDB
security-tracker.debian.org/tracker/CVE-2007-4048Advisory

Related vulnerabilities

CVE-2003-0536debianphpsysinfo+11.47%23y ago10-07-2003 04:00Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters.CVE-2005-0870debianphpsysinfo+13.72%21y ago26-03-2005 05:00Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php.CVE-2005-0869debianphpsysinfo+15.18%21y ago26-03-2005 05:00phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php, (6) system_header.php, or (7) system_footer.php, which reveal the path in a PHP error message.CVE-2005-3348debianphpsysinfo+11.98%20y ago18-11-2005 02:00HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.CVE-2026-55584debianphpsysinfo+21.91%1mo ago28-08-2026 18:29phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_config.php trusts attacker-controlled X-Forwarded-For and Client-IP HTTP headers before REMOTE_ADDR. A remote unauthenticated attacker can supply an allowed address in one of these headers to impersonate a trusted client and access exposed hostname, kernel, CPU, memory, filesystem, and network-interface information. This issue is fixed in version 3.4.6.CVE-2023-49006debianphpsysinfo+20.52%2y ago19-12-2023 00:00Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a crafted page in the XML.php file.

All vulnerabilities inphpsysinfo

CVE-2007-4048: phpsysinfo

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References