{"id":"CVE-2006-3360","aliases":["DEBIAN-CVE-2006-3360","EUVD-2022-2067","GHSA-2wxv-3g4v-p76p"],"status":"published","title":"phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence","description":"Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05574,"percentile":0.9293,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2006-07-06T00:00:00Z","modified":"2026-10-22T23:47:27Z","fixes":[{"ecosystem":"Packagist","package":"phpsysinfo/phpsysinfo","fixed_in":["3.2.5"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"phpsysinfo","fixed_in":["3.2.5-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"phpsysinfo","fixed_in":["3.2.5-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"phpsysinfo","fixed_in":["3.2.5-3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"phpsysinfo/phpsysinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"phpsysinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"phpsysinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"phpsysinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-3"}]}]},{"source":"osv","ecosystem":"Packagist","package":"phpsysinfo/phpsysinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5"}]}],"versions":["v3.1.13","v3.1.14","v3.1.15","v3.1.16","v3.1.17","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.2.4"]}],"products":[{"vendor":"phpsysinfo","product":"phpsysinfo"}],"references":[{"url":"http://securitytracker.com/id?1016440","tags":["vdb-entry","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27527","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://www.vupen.com/english/advisories/2006/2668","tags":["vdb-entry","x_transferred","Broken Link","Permissions Required","Third Party Advisory","advisory","report"]},{"url":"http://www.osvdb.org/27015","tags":["vdb-entry","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/20939","tags":["third-party-advisory","x_transferred","Broken Link","Vendor Advisory","advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html","tags":["mailing-list","x_transferred","Broken Link","Exploit","evidence","web"]},{"url":"http://www.securityfocus.com/bid/18868","tags":["vdb-entry","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html","tags":["mailing-list","x_transferred","Broken Link","Exploit","evidence","web"]},{"url":"https://github.com/advisories/GHSA-2wxv-3g4v-p76p","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/phpsysinfo/phpsysinfo/issues/368#issuecomment-1380842745","tags":["x_transferred","Issue Tracking","Third Party Advisory","advisory","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3360","tags":["advisory"]},{"url":"https://github.com/phpsysinfo/phpsysinfo/issues/107","tags":["web"]},{"url":"https://github.com/phpsysinfo/phpsysinfo/commit/60b5bbb5d1cc17f44050e99a3e746f55a4fd4e18","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-3360","tags":["advisory"]},{"url":"https://github.com/phpsysinfo/phpsysinfo","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2006-3360","description":"Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","status":"published","published":"2006-07-06T00:00:00Z","modified":"2024-08-07T18:23:21.27Z","updated_at":"2026-11-02T14:33:49.62488Z"}],"euvd":[{"id":"EUVD-2022-2067","description":"Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","status":"published","published":"2006-07-06T00:00:00Z","modified":"2024-08-07T18:23:21Z","updated_at":"2026-11-03T01:15:56.778843Z"}],"ghsa":[{"id":"GHSA-2wxv-3g4v-p76p","title":"phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence","description":"Directory traversal vulnerability in index.php in phpSysInfo prior to 3.2.5 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","status":"published","published":"2022-05-01T07:08:17Z","modified":"2023-03-30T20:57:09Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:36:48.905887Z"}],"nvd":[{"id":"CVE-2006-3360","description":"Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","status":"published","published":"2006-07-06T20:05:00Z","modified":"2026-06-16T22:26:54.807Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:01:04.288594Z"}],"osv":[{"id":"CVE-2006-3360","description":"Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","status":"published","published":"2006-07-06T20:05:00Z","modified":"2026-04-10T03:37:39.370008Z","updated_at":"2026-11-02T15:43:56.581247Z"},{"id":"DEBIAN-CVE-2006-3360","description":"Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","status":"published","published":"2006-07-06T20:05:00Z","modified":"2026-10-22T23:47:27.840786676Z","updated_at":"2026-11-02T15:45:23.105674Z"},{"id":"GHSA-2wxv-3g4v-p76p","title":"phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence","description":"Directory traversal vulnerability in index.php in phpSysInfo prior to 3.2.5 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.","status":"published","published":"2022-05-01T07:08:17Z","modified":"2026-02-04T04:31:12.583938Z","cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:35.050232Z"}]}}