medium5.0
CVE-2006-5117
phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sen…
Impact
phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyadmin | Phpmyadmin | Versions 2.8.0.1, 2.8.0.2, 2.8.0.3, 2.8.1, 2.8.1_dev, 2.8.3 |
References
- NVD record
- CVE.org record
- http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html
- http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download
- http://secunia.com/advisories/22126
- http://secunia.com/advisories/23086
- http://www.securityfocus.com/bid/20253
- http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html
- http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download
- http://secunia.com/advisories/22126
- http://secunia.com/advisories/23086
- http://www.securityfocus.com/bid/20253