Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
phpMyAdmin Improper Input Validation Vulnerability - CVE-2006-6943 - Vulnerability Database
phpMyAdmin

phpMyAdmin Improper Input Validation Vulnerability - CVE-2006-6943

Medium
Reference: CVE-2006-6943
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-6943
Title: phpMyAdmin Improper Input Validation Vulnerability
Overview:

PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/check_lang.php and (b) themes/darkblue_orange/layout.inc.php and via the (1) lang (2) target (3) db (4) goto (5) table and (6) tbl_group array arguments to (c) index.php and the (7) back argument to (d) sql.php and an invalid (8) sort_by parameter to (e) server_databases.php and (9) db parameter to (f) db_printview.php.