CVE

Id
19464  
CVE No.
CVE-2006-3360  
Status
Candidate  
Description
Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.  
Phase
Assigned (20060706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
174791 19464 CVE-2006-3360 FULLDISC:20060705 Re: phpSysInfo arbitrary file identification  View
174792 19464 CVE-2006-3360 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html  View
174793 19464 CVE-2006-3360 FULLDISC:20060705 phpSysInfo arbitrary file identification  View
174794 19464 CVE-2006-3360 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html  View
174795 19464 CVE-2006-3360 BID:18868  View
174796 19464 CVE-2006-3360 URL:http://www.securityfocus.com/bid/18868  View
174797 19464 CVE-2006-3360 VUPEN:ADV-2006-2668  View
174798 19464 CVE-2006-3360 URL:http://www.vupen.com/english/advisories/2006/2668  View
174799 19464 CVE-2006-3360 OSVDB:27015  View
174800 19464 CVE-2006-3360 URL:http://www.osvdb.org/27015  View
174801 19464 CVE-2006-3360 SECTRACK:1016440  View
174802 19464 CVE-2006-3360 URL:http://securitytracker.com/id?1016440  View
174803 19464 CVE-2006-3360 SECUNIA:20939  View
174804 19464 CVE-2006-3360 URL:http://secunia.com/advisories/20939  View
174805 19464 CVE-2006-3360 XF:phpsysinfo-lng-information-disclosure(27527)  View

Related JVN