CVE-2005-3622: Medium severity phpMyAdmin phpMyAdmin vulnerability
Published Nov 16, 2005
·Updated
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
Affected Software
15 affected components
phpMyAdmin phpMyAdmin=2.5.2_pl1
phpMyAdmin phpMyAdmin=2.6.2_pl1
phpMyAdmin phpMyAdmin=2.6.1_pl3
phpMyAdmin phpMyAdmin=2.6.0_pl3
phpMyAdmin phpMyAdmin=2.5.7_pl1
phpMyAdmin phpMyAdmin=2.6.4_pl3
phpMyAdmin phpMyAdmin=2.5.4
phpMyAdmin phpMyAdmin=2.5.3
phpMyAdmin phpMyAdmin=2.6.4_pl4
phpMyAdmin phpMyAdmin=2.5.6_rc2
phpMyAdmin phpMyAdmin=2.2.0
phpMyAdmin phpMyAdmin=2.2.7_pl1
phpMyAdmin phpMyAdmin=2.6.3_pl1
phpMyAdmin phpMyAdmin=2.7.0_beta1
phpMyAdmin phpMyAdmin=2.5.5_pl1
Event History
Nov 16, 2005
CVE Published
11:02 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3622?
CVE-2005-3622 is considered a medium severity vulnerability because it allows remote attackers to obtain sensitive information.
2
How do I fix CVE-2005-3622?
To fix CVE-2005-3622, upgrade to a version of phpMyAdmin later than 2.7.0-beta1.
3
What software versions are affected by CVE-2005-3622?
CVE-2005-3622 affects several versions of phpMyAdmin, including 2.7.0-beta1 and earlier versions such as 2.5.x and 2.6.x.
4
What type of vulnerability is CVE-2005-3622?
CVE-2005-3622 is a path disclosure vulnerability that can expose the server's file system structure to attackers.
5
Can I exploit CVE-2005-3622 remotely?
Yes, CVE-2005-3622 can be exploited remotely by sending direct requests to specific scripts in the phpMyAdmin libraries directory.