phpsysinfo/phpsysinfo
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| phpSysInfo has an IP allowlist (PSI_ALLOWED) bypass via spoofed X-Forwarded-For / Client-IP headers | phpsysinfo/phpsysinfo | Composer | High | Fix reported | |
| phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence | phpsysinfo/phpsysinfo | Composer | Medium | Fix reported | |
| Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability | phpsysinfo/phpsysinfo | Composer | Medium | Fix reported |