phpMyAdmin 2.7.0-beta1 and previous versions allows remote malicious users to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
phpmyadmin phpmyadmin 2.5.2 pl1 |
||
phpmyadmin phpmyadmin 2.6.2 pl1 |
||
phpmyadmin phpmyadmin 2.6.1 pl3 |
||
phpmyadmin phpmyadmin 2.6.0 pl3 |
||
phpmyadmin phpmyadmin 2.5.7 pl1 |
||
phpmyadmin phpmyadmin 2.6.4 pl3 |
||
phpmyadmin phpmyadmin 2.5.4 |
||
phpmyadmin phpmyadmin 2.5.3 |
||
phpmyadmin phpmyadmin 2.6.4 pl4 |
||
phpmyadmin phpmyadmin 2.5.6 rc2 |
||
phpmyadmin phpmyadmin 2.2.0 |
||
phpmyadmin phpmyadmin 2.2.7 pl1 |
||
phpmyadmin phpmyadmin 2.6.3 pl1 |
||
phpmyadmin phpmyadmin 2.7.0 beta1 |
||
phpmyadmin phpmyadmin 2.5.5 pl1 |
Vulmon