CVE-2006-5117
EPSS 0.46%
Description
phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files.
How to fix CVE-2006-5117
To remediate CVE-2006-5117, upgrade the affected package to a fixed version below.
- Debian/phpmyadmin—upgrade to 4:2.9.0.2-0.1 or later
Is CVE-2006-5117 being exploited?
Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 4:2.9.0.2-0.1