CVE-2023-49006

Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a crafted page in the XML.php file.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.52% chance of exploitation in the next 30 days, 42th percentile

Published

2023-12-19

Updated

2024-08-02

Proof-of-concept exploits (2)

• Hebing123/cve/issues/5
• https://huntr.com/bounties/ca6d669f-fd82-4188-aae2-69e08740d982/

References

• CVE Record
• NVD entry

Related

• CVE-2023-49002
• CVE-2023-49007
• CVE-2023-4899
• CVE-2023-49031
• CVE-2023-4898
• CVE-2023-49034