CVE-2006-5125
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim...
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
- Record
CVE-2006-5125- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
- Record
CVE-2006-5125- Updated
- 2026-11-02
EUVDEUVD-2006-5110 No score
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
- Record
EUVD-2006-5110- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pch2-jm6w-3fp3 No score
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim...
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
- Record
GHSA-pch2-jm6w-3fp3- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | phpMyWebmin 1.0 - 'window.php' Remote File Inclusion | 2006-09-28 |
| Exploit-DB | phpMyWebmin 1.0 - 'target' Remote File Inclusion | 2006-09-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5125 is a medium vulnerability (CVSS 5.0) in Joshua Muheim Phpmywebmin, published October 2, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.73%, the 89th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2006/3846
securityfocus.com/bid/20264
exploit-db.com/exploits/2451
secunia.com/advisories/22178
exchange.xforce.ibmcloud.com/vulnerabilities/29259
kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html
nvd.nist.gov/vuln/detail/CVE-2006-5125
github.com/advisories/GHSA-pch2-jm6w-3fp3