Vulnerabilities > CVE-2007-0095 - Information Disclosure vulnerability in PHPmyadmin 2.9.1.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
phpmyadmin
nessus
NVD
Published: 2007-01-05
Updated: 2017-07-29

Summary

phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, which reveals the path in an error message.

Vulnerable Configurations

Part Description Count
Application
Phpmyadmin
1

Nessus

  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2007-4334.NASL
    description - Upstream released 2.11.3 - Removed the RPM scriptlets doing httpd restarts (#227025) - Patched an information disclosure known as CVE-2007-0095 (#221694) - Provide virtual phpmyadmin package and a httpd alias (#231431) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id29284
    published2007-12-11
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/29284
    titleFedora 8 : phpMyAdmin-2.11.3-1.fc8 (2007-4334)
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2007-4298.NASL
    description - Upstream released 2.11.3 - Removed the RPM scriptlets doing httpd restarts (#227025) - Patched an information disclosure known as CVE-2007-0095 (#221694) - Provide virtual phpmyadmin package and a httpd alias (#231431) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id29281
    published2007-12-11
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/29281
    titleFedora 7 : phpMyAdmin-2.11.3-1.fc7 (2007-4298)

References