CVE-2006-6943
CVE-2006-6943
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/check_lang.php and (b) themes/darkblue_orange/layout.inc.php; and via the (1) lang[], (2) target[], (3) db[], (4) goto[], (5) table[], and (6) tbl_group[] array arguments to (c) index.php, and the (7) back[] argument to (d) sql.php; and an invalid (8) sort_by parameter to (e) server_databases.php and (9) db parameter to (f) db_printview.php.
EPSS 4.8% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phpmyadmin Debian:12
- Affected ranges
- ECOSYSTEM: < 4:2.9.1.1-2
Update to 4:2.9.1.1-2
phpmyadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 4:2.9.1.1-2
Update to 4:2.9.1.1-2
phpmyadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 4:2.9.1.1-2
Update to 4:2.9.1.1-2