CVE-2006-5117

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-03 · updated 2026-06-16

Description

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files.

Affected products

phpMyAdmin: 2.8.0.1, 2.8.0.2, 2.8.0.3, 2.8.1, 2.8.1_dev, 2.8.3 (+2)

References

http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html
http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download
http://secunia.com/advisories/22126
http://secunia.com/advisories/23086
http://www.securityfocus.com/bid/20253
http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html
http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download
http://secunia.com/advisories/22126
http://secunia.com/advisories/23086
http://www.securityfocus.com/bid/20253

Get alerted when CVE-2006-5117 or the next vulnerability affects your stack