The remote host is running phpSysInfo, a PHP application that parses the /proc entries on Linux/Unix systems and displays them in HTML.

The installed version of phpSysInfo on the remote host has a design flaw in its globalization layer such that the script's variables can be overwritten independent of PHP's 'register_globals' setting.  By exploiting this issue, an attacker may be able to read arbitrary files on the remote host and even execute arbitrary PHP code, both subject to the privileges of the web server user id.

In addition, the application fails to sanitize user-supplied input before using it in dynamically-generated pages, which can be used to conduct cross-site scripting and HTTP response splitting attacks.

リモートホストは、phpSysInfoを実行しています。これは、Linuxシステムの/procエントリを解析し、HTMLで表示するPHPスクリプトです。 

リモートホストにインストールされているphpSysInfoのバージョンは、「index.php」の「sensor_program」パラメーター、および「system_footer.php」の「text [language]」、「text[template]」、「VERSION」パラメーターへのユーザー入力をサニタイズできないため、複数のクロスサイトスクリプティングの脆弱性の影響を受けます。PHPの「register_globals」設定が有効な場合、リモートの攻撃者がこれらの欠陥を悪用して、影響を受けるWebサイトのコンテキスト内のユーザーのブラウザで任意のスクリプトをレンダリングする可能性があります。

リモートホストは、phpSysInfoを実行しています。これは、Linux/Unixシステムの/procエントリを解析し、HTMLで表示するPHPアプリケーションです。

リモートホストにインストールされているバージョンのphpSysInfoのグローバリゼーションレイヤーに設計上の欠陥があり、スクリプトの変数がPHPの「register_globals」設定に関係なく上書きされる可能性があります。攻撃者が、この問題を悪用して、WebサーバーユーザーIDの権限に従って、リモートホストで任意のファイルを読み取ったり、任意のPHPコードを実行したりする可能性があります。

さらに、アプリケーションは、動的に生成されたページで使用する前に、ユーザー指定の入力をサニタイズできないため、クロスサイトスクリプティングおよびHTTP応答分割攻撃を仕掛けるために使用される可能性があります。

遠端主機正在執行 phpSysInfo，此 PHP 應用程式可剖析 Linux/Unix 系統上的 /proc 項目並以 HTML 顯示。

遠端主機上安裝的 phpSysInfo 版本在其全球化層中有一個設計缺陷，不論 PHP 的「register_globals」設定為何，使用者皆可覆寫此指令碼的變數。攻擊者可利用此問題，讀取遠端主機上的任意檔案，甚至執行任意 PHP 程式碼，兩者皆需使用 Web 伺服器使用者 ID 的權限。

此外，此應用程式未清理使用者提供的輸入，便將其用於動態產生的頁面，攻擊者可利用此問題來執行跨網站指令碼攻擊和 HTTP 回應分割攻擊。

远程主机正在运行 phpSysInfo，这是一款解析 Linux 系统上的 /proc 条目并以 HTML 对其进行显示的 PHP 脚本。 

远程主机上安装的 phpSysInfo 版本受到多个跨站脚本漏洞的影响，这是其未能审查用户针对“index.php”的“sensor_program”参数和“system_footer.php”的“text[language]”、“text[template]”及“VERSION”参数提供的输入所致。如果启用了 PHP 的“register_globals”设置，则远程攻击者可利用这些缺陷，在受影响网站的环境中的用户浏览器中呈现任意脚本。

遠端主機正在執行 phpSysInfo，此 PHP 指令碼可剖析 Linux 系統上的 /proc 項目並以 HTML 顯示。 

遠端主機上安裝的 phpSysInfo 版本受到多個跨網站指令碼弱點影響，這是因為其無法清理「index.php」的「sensor_program」參數以及「system_footer.php」的「text[language]」、「text[ template]」和「VERSION」參數中的使用者輸入資料。如果啟用 PHP 的「register_globals」設定，遠端攻擊者就可利用這些缺陷，於使用者的瀏覽器中在受影響網站的內容中轉譯任意指令碼。

Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2005-0870     Maksymilian Arciemowicz discovered several cross site     scripting problems, of which not all were fixed in DSA     724.

  - CVE-2005-3347     Christopher Kunz discovered that local variables get     overwritten unconditionally and are trusted later, which     could lead to the inclusion of arbitrary files.

  - CVE-2005-3348     Christopher Kunz discovered that user-supplied input is     used unsanitised, causing a HTTP Response splitting     problem.

A Securityreason.com advisory reports that various cross site scripting vulnerabilities have been found in phpSysInfo. Input is not properly sanitised before it is returned to the user. A malicious person could exploit this to execute arbitrary HTML and script code in a users browser session. Also it is possible to view the full path of certain scripts by accessing them directly.

The remote host is running phpSysInfo, a PHP script that parses the /proc entries on Linux systems and displays them in HTML. 

The version of phpSysInfo installed on the remote host is affected by multiple cross-site scripting vulnerabilities due to its failure to sanitize user input to the 'sensor_program' parameter of 'index.php' and the 'text[language]', 'text[template]', and 'VERSION' parameters of 'system_footer.php'.  If PHP's 'register_globals' setting is enabled, a remote attacker can exploit these flaws to have arbitrary script rendered in the browser of a user in the context of the affected website.

Maksymilian Arciemowicz discovered several cross site scripting issues in phpsysinfo, a PHP based host information application.

Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application that is included in phpgroupware.
The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2005-0870     Maksymilian Arciemowicz discovered several cross site     scripting problems, of which not all were fixed in DSA     724.

  - CVE-2005-3347     Christopher Kunz discovered that local variables get     overwritten unconditionally and are trusted later, which     could lead to the inclusion of arbitrary files.

  - CVE-2005-3348     Christopher Kunz discovered that user-supplied input is     used unsanitised, causing a HTTP Response splitting     problem.

Several vulnerabilities have been discovered in egroupware, a web-based groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2005-0870     Maksymilian Arciemowicz discovered several cross site     scripting problems in phpsysinfo, which are also present     in the imported version in egroupware and of which not     all were fixed in DSA 724.

  - CVE-2005-2600     Alexander Heidenreich discovered a cross-site scripting     problem in the tree view of FUD Forum Bulletin Board     Software, which is also present in egroupware and allows     remote attackers to read private posts via a modified     mid parameter.

  - CVE-2005-3347     Christopher Kunz discovered that local variables get     overwritten unconditionally in phpsysinfo, which are     also present in egroupware, and are trusted later, which     could lead to the inclusion of arbitrary files.

  - CVE-2005-3348     Christopher Kunz discovered that user-supplied input is     used unsanitised in phpsysinfo and imported in     egroupware, causing a HTTP Response splitting problem.

The remote host is running phpSysInfo, a PHP script that monitors and reports on local *nix system resources utilization.  This version of phpSysInfo is vulnerable to a remote Cross-Site Scripting attack.  An attacker exploiting this flaw would need to be able to convince a user to browse a malicious URI.  Successful exploitation could lead to a loss of integrity as code would be executed by the browser within the security context of the vulnerable web site.

The remote host is running PHPSysInfo, a PHP application that gives system information via a web interface.  This version of PHPSysInfo is vulnerable to a multitude of flaws.  These flaws include Cross-Site Scripting (XSS), HTML injection, and a local file inclusion flaw.  There is also an inherent risk whenever system information is displayed via a web interface.  Of these flaws, the more serious flaw is the local file inclusion vulnerability.  An attacker exploiting this flaw would be able to retrieve and display potentially confidential files (such as /etc/passwd).  This can lead to confidential materials being downloaded by anonymous users. 

ID	名前	製品	ファミリー	公開日	更新日	深刻度
20215	phpSysInfo < 2.4.1 Multiple Vulnerabilities	Nessus	CGI abuses	2005/11/16	2022/4/11	medium
17610	PHPSysInfo < 2.5の複数のスクリプトのXSS	Nessus	CGI abuses : XSS	2005/3/24	2022/4/11	medium
20215	phpSysInfo < 2.4.1の複数の脆弱性	Nessus	CGI abuses	2005/11/16	2022/4/11	medium
20215	phpSysInfo < 2.4.1 多個弱點	Nessus	CGI abuses	2005/11/16	2022/4/11	medium
17610	PHPSysInfo < 2.5 多个脚本 XSS	Nessus	CGI abuses : XSS	2005/3/24	2022/4/11	medium
17610	PHPSysInfo < 2.5 多個指令碼 XSS	Nessus	CGI abuses : XSS	2005/3/24	2022/4/11	medium
22763	Debian DSA-897-1 : phpsysinfo - programming errors	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
21428	FreeBSD : phpSysInfo -- XSS vulnerability (50457509-d05e-11d9-9aed-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	2006/5/13	2021/1/6	medium
17610	PHPSysInfo < 2.5 Multiple Script XSS	Nessus	CGI abuses : XSS	2005/3/24	2022/4/11	medium
18303	Debian DSA-724-1 : phpsysinfo - design flaw	Nessus	Debian Local Security Checks	2005/5/19	2021/1/4	medium
22764	Debian DSA-898-1 : phpgroupware - programming errors	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
22765	Debian DSA-899-1 : egroupware - programming errors	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
2748	phpSysInfo < 2.5 Multiple Script XSS	Nessus Network Monitor	CGI	2005/3/23	2019/3/6	low
3289	PHPSysInfo < 2.4.0 Multiple Vulnerabilities	Nessus Network Monitor	CGI	2005/11/14	2019/3/6	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

low

medium