OSVDB ID: 8465

Title: phpMyAdmin pdf_pages.php Path Disclosure

Info

Disclosure
Jun 18, 2003

Discovery
Unknown

Dates

Exploit
Jun 18, 2003

Solution
Unknown

Description

 phpMyAdmin contains a flaw that may lead to an unauthorized information disclosure.  The issue is triggered when an attacker requests the "pdf_pages.php" script without any arguments, which will disclose the web server path resulting in a loss of confidentiality.

Classification

 Location: Remote / Network Access
Attack Type: Misconfiguration
Impact: Loss of Confidentiality
Exploit: Exploit Public
OSVDB: Web Related

Solution

 Upgrade to version 2.5.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

phpMyAdmin Devel Team

phpMyAdmin

 2.5.1
2.5.0
2.4.x
2.3.x
2.2.x
2.1.x
2.0.x
1.x.x

References

Credit
  • Lorenzo Hernandez Garcia - novappcnovappc.com - Nova Projects Professional Coding


Direct URL: http://osvdb.org/8465