Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2006-6944

phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false headers.

  • Published: Jan 19, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-6944
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
phpmyadmin / phpmyadmin 2.9.1_rc2 2.9.1_rc2.x
phpmyadmin / phpmyadmin 2.9.0.1 2.9.0.1.x
phpmyadmin / phpmyadmin 2.9.0.2 2.9.0.2.x
phpmyadmin / phpmyadmin 2.9.0_rc1 2.9.0_rc1.x
phpmyadmin / phpmyadmin 2.9.0 2.9.0.x
phpmyadmin / phpmyadmin 2.9.0.3 2.9.0.3.x
phpmyadmin / phpmyadmin - 2.9.1.x
phpmyadmin / phpmyadmin 2.9.1_rc1 2.9.1_rc1.x
phpmyadmin / phpmyadmin 2.9.0_beta1 2.9.0_beta1.x