CVE-2005-0544 — Phpmyadmin vulnerability

5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 33.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
PhpmyadminDebian Phpmyadmin
Timeline
PublishedMay 2
Latest updateMay 1

Description

phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, whic…

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/phpmyadmin< phpmyadmin 3:2.6.1-pl2-1 (bookworm)
▶Debianphpmyadmin/phpmyadmin< 3:2.6.1-pl2-1+3

Patches

Patch: secunia.com ↗Patch: www.gentoo.org ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-95j2-g4qr-3jj6: phpMyAdmin 2↗2022-05-01
▶
OSV
CVE-2005-0544: phpMyAdmin 2↗2005-05-02
▶

📋Vendor Advisories

2
Debian
CVE-2005-0544: phpmyadmin - phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server v...↗2005
▶
Red Hat
CVE-2005-1730: Multiple vulnerabilities in the OpenSSL ASN↗
▶