Vulnerabilities > CVE-2005-0459 - Unspecified vulnerability in PHPmyadmin

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

phpmyadmin

NVD

Published: 2005-05-02

Updated: 2008-09-05

Summary

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message.

Vulnerable Configurations

Part	Description	Count
Application	Phpmyadmin Phpmyadmin Phpmyadmin 2.1.1 Phpmyadmin Phpmyadmin 2.2.4 Phpmyadmin Phpmyadmin 2.1.2 Phpmyadmin Phpmyadmin 2.2_Pre1 Phpmyadmin Phpmyadmin 2.5.0 Phpmyadmin Phpmyadmin 2.0.4 Phpmyadmin Phpmyadmin 2.3.1 Phpmyadmin Phpmyadmin 2.0.2 Phpmyadmin Phpmyadmin 2.5.5_Rc1 Phpmyadmin Phpmyadmin 2.6.0_Pl3 Phpmyadmin Phpmyadmin 2.5.7_Pl1 Phpmyadmin Phpmyadmin 2.4.0 Phpmyadmin Phpmyadmin 2.5.5 Phpmyadmin Phpmyadmin 2.5.7 Phpmyadmin Phpmyadmin 2.5.6_Rc1 Phpmyadmin Phpmyadmin 2.0.3 Phpmyadmin Phpmyadmin 2.2.6 Phpmyadmin Phpmyadmin 2.6.2_Dev Phpmyadmin Phpmyadmin 2.6.0_Pl1 Phpmyadmin Phpmyadmin 2.5.2 Phpmyadmin Phpmyadmin 2.1 Phpmyadmin Phpmyadmin 2.0.1 Phpmyadmin Phpmyadmin 2.5.1 Phpmyadmin Phpmyadmin 2.6.0_Pl2 Phpmyadmin Phpmyadmin 2.2_Rc2 Phpmyadmin Phpmyadmin 2.3.2 Phpmyadmin Phpmyadmin 2.5.4 Phpmyadmin Phpmyadmin 2.2.5 Phpmyadmin Phpmyadmin 2.2_Rc3 Phpmyadmin Phpmyadmin 2.2.2 Phpmyadmin Phpmyadmin 2.2.3 Phpmyadmin Phpmyadmin 2.5.5_Rc2 Phpmyadmin Phpmyadmin 2.2_Rc1 Phpmyadmin Phpmyadmin 2.0 Phpmyadmin Phpmyadmin 2.5.5_Pl1 Phpmyadmin Phpmyadmin 2.0.5	36

References

http://securitytracker.com/id?1013210