5
CVE-2006-6943
- EPSS 11.54%
- Published 19.01.2007 02:28:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/check_lang.php and (b) themes/darkblue_orange/layout.inc.php; and via the (1) lang[], (2) target[], (3) db[], (4) goto[], (5) table[], and (6) tbl_group[] array arguments to (c) index.php, and the (7) back[] argument to (d) sql.php; and an invalid (8) sort_by parameter to (e) server_databases.php and (9) db parameter to (f) db_printview.php.
Data is provided by the National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version <= 2.9.1
Phpmyadmin ≫ Phpmyadmin Version2.9.0
Phpmyadmin ≫ Phpmyadmin Version2.9.0.1
Phpmyadmin ≫ Phpmyadmin Version2.9.0.2
Phpmyadmin ≫ Phpmyadmin Version2.9.0.3
Phpmyadmin ≫ Phpmyadmin Version2.9.0_beta1
Phpmyadmin ≫ Phpmyadmin Version2.9.0_rc1
Phpmyadmin ≫ Phpmyadmin Version2.9.1_rc1
Phpmyadmin ≫ Phpmyadmin Version2.9.1_rc2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 11.54% | 0.934 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.