| Package | Affected versions | Patched versions |
|---|---|---|
| sysinfo | = 1.21 |
Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; (semicolon) in the name parameter in a systemdoc action, which is injected into phpinfo.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free