CVE-2006-3360

CVE-2006-3360 describes a directory traversal vulnerability in phpSysInfo version 2.5.1's index.php. An unauthenticated remote attacker can exploit this by manipulating the 'lng' parameter with a dot-dot sequence and a null byte to determine the existence of arbitrary files on the server. The vulnerability has a CVSS score of 5.0 (Medium), indicating low attack complexity and no authentication required, but only impacts confidentiality by revealing file existence. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on the KEV catalog.