Vendor
A vulnerability in phpSysInfo 3.4.5 and earlier allows unauthenticated attackers to bypass IP-based access controls by spoofing HTTP headers, potentially exposing sensitive system information via xml.php.