First published: Fri Jan 05 2007(Updated: )
phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, which reveals the path in an error message.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
phpMyAdmin phpMyAdmin | =2.9.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-0095 is considered to be of moderate severity due to potential information disclosure.
To fix CVE-2007-0095, update PHPMyAdmin to a version higher than 2.9.1.1.
CVE-2007-0095 is an information disclosure vulnerability that exposes sensitive path details.
CVE-2007-0095 affects users of PHPMyAdmin version 2.9.1.1.
Attackers exploiting CVE-2007-0095 can gain sensitive information about the server's file paths.