Vulnerability in Phpmyadmin

CVE-2006-6944

phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false headers.

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

  • Phpmyadmin — versions 2.9.0, 2.9.0.1, 2.9.0.2
  • N/a — versions n/a

References