First published: Wed Nov 16 2005(Updated: )
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
Credit: security@debian.org
Affected Software | Affected Version | How to fix |
---|---|---|
phpMyAdmin phpMyAdmin | =2.5.2_pl1 | |
phpMyAdmin phpMyAdmin | =2.6.2_pl1 | |
phpMyAdmin phpMyAdmin | =2.6.1_pl3 | |
phpMyAdmin phpMyAdmin | =2.6.0_pl3 | |
phpMyAdmin phpMyAdmin | =2.5.7_pl1 | |
phpMyAdmin phpMyAdmin | =2.6.4_pl3 | |
phpMyAdmin phpMyAdmin | =2.5.4 | |
phpMyAdmin phpMyAdmin | =2.5.3 | |
phpMyAdmin phpMyAdmin | =2.6.4_pl4 | |
phpMyAdmin phpMyAdmin | =2.5.6_rc2 | |
phpMyAdmin phpMyAdmin | =2.2.0 | |
phpMyAdmin phpMyAdmin | =2.2.7_pl1 | |
phpMyAdmin phpMyAdmin | =2.6.3_pl1 | |
phpMyAdmin phpMyAdmin | =2.7.0_beta1 | |
phpMyAdmin phpMyAdmin | =2.5.5_pl1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.