← All advisories

Unrated severityNVD Advisory· Published Jan 19, 2007· Updated Jun 16, 2026

CVE-2006-6944

CVE-2006-6944

Description

phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false headers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

PhpMyAdmin/phpMyAdmin10 versions
cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*range: <=2.9.1
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*
- (no CPE)range: <2.9.1.1

Patches

Vulnerability mechanics

References

4

www.phpmyadmin.net/home_page/security.phpnvdPatchVendor Advisory
secunia.com/advisories/26733nvd
www.us.debian.org/security/2007/dsa-1370nvd
www.vupen.com/english/advisories/2006/4572nvd

News mentions

0

No linked articles in our index yet.