Description
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/17616 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:212 ↗
- http://www.securityfocus.com/bid/15414 ↗
- http://secunia.com/advisories/14690/ ↗
- http://www.debian.org/security/2005/dsa-898 ↗
- http://marc.info/?l=bugtraq&m=111161017209422&w=2 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19807 ↗
- http://www.securityfocus.com/archive/1/416543 ↗
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=301118 ↗
- http://www.securityfocus.com/bid/12887 ↗
- http://www.debian.org/security/2005/dsa-897 ↗
- http://www.debian.org/security/2005/dsa-724 ↗
- http://www.debian.org/security/2005/dsa-899 ↗
- http://secunia.com/advisories/17643 ↗