| Package: | phpmyadmin |
| Date: | 2008-04-25 |
| Vulnerable version: | 2.11.5.1-1kalgan1 |
| Unaffected version: | 2.11.5.2-1kalgan1 |
| Bug tracker entry: | http://bugs.frugalware.org/task/3035 |
| CVEs: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1924 |
| Description: | A vulnerability has been reported in phpMyAdmin, which can be exploited by malicious users to disclose sensitive information. The vulnerability is caused due to an unspecified error and can be exploited to disclose arbitrary files via a specially crafted HTTP POST request. Successful exploitation requires a certain level of access e.g. on a shared host. |
