CVE-2006-4976
CVE-2006-4976
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) server.php, (2) adodb-errorpear.inc.php, (3) adodb-iterator.inc.php, (4) adodb-pear.inc.php, (5) adodb-perf.inc.php, (6) adodb-xmlschema.inc.php, and (7) adodb.inc.php; files in datadict including (8) datadict-access.inc.php, (9) datadict-db2.inc.php, (10) datadict-generic.inc.php, (11) datadict-ibase.inc.php, (12) datadict-informix.inc.php, (13) datadict-mssql.inc.php, (14) datadict-mysql.inc.php, (15) datadict-oci8.inc.php, (16) datadict-postgres.inc.php, and (17) datadict-sybase.inc.php; files in drivers/ including (18) adodb-access.inc.php, (19) adodb-ado.inc.php, (20) adodb-ado_access.inc.php, (21) adodb-ado_mssql.inc.php, (22) adodb-borland_ibase.inc.php, (23) adodb-csv.inc.php, (24) adodb-db2.inc.php, (25) adodb-fbsql.inc.php, (26) adodb-firebird.inc.php, (27) adodb-ibase.inc.php, (28) adodb-informix.inc.php, (29) adodb-informix72.inc.php, (30) adodb-mssql.inc.php, (31) adodb-mssqlpo.inc.php, (32) adodb-mysql.inc.php, (33) adodb-mysqli.inc.php, (34) adodb-mysqlt.inc.php, (35) adodb-oci8.inc.php, (36) adodb-oci805.inc.php, (37) adodb-oci8po.inc.php, (38) adodb-odbc.inc.php, (39) adodb-odbc_mssql.inc.php, (40) adodb-odbc_oracle.inc.php, (41) adodb-oracle.inc.php, (42) adodb-postgres64.inc.php, (43) adodb-postgres7.inc.php, (44) adodb-proxy.inc.php, (45) adodb-sapdb.inc.php, (46) adodb-sqlanywhere.inc.php, (47) adodb-sqlite.inc.php, (48) adodb-sybase.inc.php, (49) adodb-vfp.inc.php; file in perf/ including (50) perf-db2.inc.php, (51) perf-informix.inc.php, (52) perf-mssql.inc.php, (53) perf-mysql.inc.php, (54) perf-oci8.inc.php, (55) perf-postgres.inc.php; tests/ files (56) benchmark.php, (57) client.php, (58) test-datadict.php, (59) test-perf.php, (60) test-pgblob.php, (61) test-php5.php, (62) test-xmlschema.php, (63) test.php, (64) test2.php, (65) test3.php, (66) test4.php, (67) test5.php, (68) test_rs_array.php, (69) testcache.php, (70) testdatabases.inc.php, (71) testgenid.php, (72) testmssql.php, (73) testoci8.php, (74) testoci8cursor.php, (75) testpaging.php, (76) testpear.php, (77) testsessions.php, (78) time.php, or (79) tmssql.php, which reveals the path in various error messages.
EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libphp-adodb Debian:12
- Versions
- 5.21.4-1
- 5.21.4-1+deb12u1
- 5.21.4-1+deb12u2
- 5.22.10-0.1
- 5.22.10-1
- 5.22.11-1
- 5.22.12-1
- 5.22.7-0.1
- 5.22.7-0.1~bpo12+1
- 5.22.8-0.1
- 5.22.9-0.1
- 5.22.9-0.1~bpo12+1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libphp-adodb Debian:13
- Versions
- 5.22.10-0.1
- 5.22.10-1
- 5.22.11-1
- 5.22.12-1
- 5.22.9-0.1
- 5.22.9-0.1+deb13u1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libphp-adodb Debian:14
- Versions
- 5.22.10-0.1
- 5.22.10-1
- 5.22.11-1
- 5.22.12-1
- 5.22.9-0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phppgadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 5.1+ds-1
Update to 5.1+ds-1
phppgadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 5.1+ds-1
Update to 5.1+ds-1