Junglewise Threat Intelligence

CVE-2006-3360: phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence

CVE-2006-3360 · Severity: info · Published 2022-05-01

Technologies: phpsysinfo/phpsysinfo (Packagist). Vendors: Packagist.

Executive brief

phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence

Affected products

Packagist phpsysinfo/phpsysinfo

Related threats

phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_confi
Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability