Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0459
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
69.6%
phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message.
Affected configurations
Node
phpmyadminphpmyadminMatch2.0
ORphpmyadminphpmyadminMatch2.0.1
ORphpmyadminphpmyadminMatch2.0.2
ORphpmyadminphpmyadminMatch2.0.3
ORphpmyadminphpmyadminMatch2.0.4
ORphpmyadminphpmyadminMatch2.0.5
ORphpmyadminphpmyadminMatch2.1
ORphpmyadminphpmyadminMatch2.1.1
ORphpmyadminphpmyadminMatch2.1.2
ORphpmyadminphpmyadminMatch2.2.2
ORphpmyadminphpmyadminMatch2.2.3
ORphpmyadminphpmyadminMatch2.2.4
ORphpmyadminphpmyadminMatch2.2.5
ORphpmyadminphpmyadminMatch2.2.6
ORphpmyadminphpmyadminMatch2.2_pre1
ORphpmyadminphpmyadminMatch2.2_rc1
ORphpmyadminphpmyadminMatch2.2_rc2
ORphpmyadminphpmyadminMatch2.2_rc3
ORphpmyadminphpmyadminMatch2.3.1
ORphpmyadminphpmyadminMatch2.3.2
ORphpmyadminphpmyadminMatch2.4.0
ORphpmyadminphpmyadminMatch2.5.0
ORphpmyadminphpmyadminMatch2.5.1
ORphpmyadminphpmyadminMatch2.5.2
ORphpmyadminphpmyadminMatch2.5.4
ORphpmyadminphpmyadminMatch2.5.5
ORphpmyadminphpmyadminMatch2.5.5_pl1
ORphpmyadminphpmyadminMatch2.5.5_rc1
ORphpmyadminphpmyadminMatch2.5.5_rc2
ORphpmyadminphpmyadminMatch2.5.6_rc1
ORphpmyadminphpmyadminMatch2.5.7
ORphpmyadminphpmyadminMatch2.5.7_pl1
ORphpmyadminphpmyadminMatch2.6.0_pl1
ORphpmyadminphpmyadminMatch2.6.0_pl2
ORphpmyadminphpmyadminMatch2.6.0_pl3
ORphpmyadminphpmyadminMatch2.6.2_dev
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpmyadmin | phpmyadmin | 2.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.2 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.3 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.4 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.5 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.1.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.1.2 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.2.2 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2005-0459
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-0459
2005-05-02 00:00:00
debiancve
debiancve
CVE-2005-0459
2005-05-02 04:00:00
cvelist
cvelist
CVE-2005-0459
2005-02-17 05:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
69.6%
Related for NVD:CVE-2005-0459