CVE-2005-0544
CVE-2005-0544
This page contains facts from public vulnerability sources. Check the original advisory before updating.
phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP error message.
EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phpmyadmin Debian:12
- Affected ranges
- ECOSYSTEM: < 3:2.6.1-pl2-1
Update to 3:2.6.1-pl2-1
phpmyadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 3:2.6.1-pl2-1
Update to 3:2.6.1-pl2-1
phpmyadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 3:2.6.1-pl2-1
Update to 3:2.6.1-pl2-1