Phpsysinfo vulnerabilities
We track 1 vulnerability in Phpsysinfo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Phpsysinfo vulnerabilities
- 7.5 High severity
phpsysinfo: Authentication Bypass by Spoofing
phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_config.php trusts attacker-controlled X-Forwarded-For and Client-IP HTTP headers before REMOTE_ADDR. A remote unauthenticated