Description

The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script.

Remediation

References

CVE-2005-1392

Related Vulnerabilities

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-47272)

WordPress Plugin WP BASE Booking of Appointments, Services and Events PHP Object Injection (3.5.0)

Dotclear Improper Access Control Vulnerability (CVE-2015-8832)

MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-10959)

WordPress Plugin Rekt Slideshow TimThumb Arbitrary File Upload (1.0.5)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2005-1392