phpMyAdmin 2.7.0-beta1 and previous versions allows remote malicious users to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
phpmyadmin phpmyadmin 2.5.6_rc2 |
||
phpmyadmin phpmyadmin 2.5.7_pl1 |
||
phpmyadmin phpmyadmin 2.2.0 |
||
phpmyadmin phpmyadmin 2.2.7_pl1 |
||
phpmyadmin phpmyadmin 2.6.0_pl3 |
||
phpmyadmin phpmyadmin 2.6.1_pl3 |
||
phpmyadmin phpmyadmin 2.5.4 |
||
phpmyadmin phpmyadmin 2.5.5_pl1 |
||
phpmyadmin phpmyadmin 2.6.4_pl4 |
||
phpmyadmin phpmyadmin 2.7.0_beta1 |
||
phpmyadmin phpmyadmin 2.5.2_pl1 |
||
phpmyadmin phpmyadmin 2.5.3 |
||
phpmyadmin phpmyadmin 2.6.2_pl1 |
||
phpmyadmin phpmyadmin 2.6.3_pl1 |
||
phpmyadmin phpmyadmin 2.6.4_pl3 |
Vulmon