24 matches found
CVE-2005-1392
The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script...
GLSA-200504-30 : phpMyAdmin: Insecure SQL script installation
"The remote host is affected by the vulnerability described in GLSA-200504-30 phpMyAdmin: Insecure SQL script installation The phpMyAdmin installation process leaves the SQL install script with insecure permissions. Impact : A local attacker could exploit this vulnerability to obtain the initial...
phpMyAdmin: Insecure SQL script installation
Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. phpMyAdmin uses a pma MySQL user to control the linked-tables infrastructure. The SQL install script sets the initial password for the pma user. Description The phpMyAdmin...
