[eddie5659]

Hiya



phpMyAdmin is a graphical PHP program that allows users to perform basic MySQL database administration over the Web. phpMyAdmin version 2.5.7 and possibly earlier versions could allow a remote attacker to modify configuration settings. A remote attacker could supply configuration settings to the left.php file to modify current configuration settings, allowing the attacker to access MySQL servers that were not listed in the original configuration file. An attacker could exploit this vulnerability to launch further attacks against MySQL servers not listed in the original file.


Platforms Affected:

kernel.org: Linux Any version
Microsoft Corporation: Windows Any version
Tobias Ratschiller: PhpMyAdmin 2.5.7
Various: Unix Any version


http://xforce.iss.net/xforce/xfdb/16555

Regards

eddie