Description
phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files.
Remediation
References
Related Vulnerabilities
MongoDb Excessive Iteration Vulnerability (CVE-2025-6714)
WordPress Plugin Activity Log Multiple Cross-Site Scripting Vulnerabilities (2.4.0)
Oracle Database Server Other Vulnerability (CVE-2005-3641)
Plone CMS CVE-2011-0720 Vulnerability (CVE-2011-0720)
WordPress Plugin WP REST API (WP API) Security Bypass (1.2.1)