phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://securitytracker.com/id?1013210 |
![]() ![]() |
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T21:13:54.255Z
Reserved: 2005-02-17T00:00:00
Link: CVE-2005-0459

No data.

Status : Deferred
Published: 2005-05-02T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2005-0459

No data.