Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpMyAdmin本地文件包含和跨站注入漏洞
Vulnerability Description
phpMyAdmin 2.6.1允许远程攻击者通过对(1)sqlvalidator.lib.php,(2)sqlparser.lib.php,(3)select_theme.lib.php,(4)select_lang.lib.php,(5)relation_cleanup.lib.php,(6)header_meta_style.inc.php,(7)get_foreign.lib.php,(8)display_tbl_links.lib.php,(9)display_export.lib.php,(1
CVSS Information
N/A
Vulnerability Type
N/A