PhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive information via a direct request for libraries/common.lib.php, which reveals the path in an error message.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Phpmyadmin | Phpmyadmin | 2.7.0_pl2 (including) | 2.7.0_pl2 (including) |
Phpmyadmin | Ubuntu | dapper | * |
Phpmyadmin | Ubuntu | devel | * |
Phpmyadmin | Ubuntu | edgy | * |
Phpmyadmin | Ubuntu | feisty | * |
Phpmyadmin | Ubuntu | gutsy | * |
Phpmyadmin | Ubuntu | hardy | * |
Phpmyadmin | Ubuntu | intrepid | * |
Phpmyadmin | Ubuntu | jaunty | * |
Phpmyadmin | Ubuntu | upstream | * |