Privilege Escalation in phpMyAdmin 2.6.1 for Tables with Underscore in Name

CVE-2005-0653 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended.

Learn more about our User Device Pen Test.