CVE-2006-5117: Medium severity phpmyadmin phpmyadmin vulnerability
Published Oct 3, 2006
·Updated
phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files.
Affected Software
8 affected components
phpMyAdmin phpMyAdmin=2.8.0.1
phpMyAdmin phpMyAdmin=2.8.0.2
phpMyAdmin phpMyAdmin=2.8.0.3
phpMyAdmin phpMyAdmin=2.8.1
phpMyAdmin phpMyAdmin=2.8.1_dev
phpMyAdmin phpMyAdmin=2.8.3
phpMyAdmin phpMyAdmin=2.8.4
phpMyAdmin phpMyAdmin=2.9.0_dev
Remediation
Patch Available
Event History
Oct 3, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:03 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5117?
CVE-2006-5117 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2006-5117?
To fix CVE-2006-5117, upgrade to phpMyAdmin version 2.9.1-rc1 or later to ensure proper access control.
3
What versions of phpMyAdmin are affected by CVE-2006-5117?
CVE-2006-5117 affects phpMyAdmin versions 2.8.0.1 through 2.8.4 and 2.8.1_dev through 2.9.0_dev.
4
What type of information can be exposed due to CVE-2006-5117?
CVE-2006-5117 allows remote attackers to obtain sensitive information from the phpMyAdmin libraries directory.
5
What is the cause of CVE-2006-5117?
CVE-2006-5117 is caused by insufficient access control settings in the phpMyAdmin libraries directory.