CVE-2006-3360 - CVE House
Back to Database
Status published Medium CVE-2006-3360

Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote...

Vulnerability Description

Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3360

Credits & Attribution

No credits recorded in the NVD database.

References

More from phpsysinfo

View All →
CVE-2007-4048
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and...
Medium 4.3
CVE-2005-3348
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and...
Medium 4.3
CVE-2005-0870
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals...
Medium 4.3
CVE-2005-0869
phpSysInfo 2.3 allows remote attackers to obtain sensitive information via...
Medium 5
CVE-2003-0536
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers...
Low 3.6

Affected Vendor

Affected Software

phpsysinfo
Vulnerable Versions:
0

Timeline

Official Publish: July 6th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.