Information disclosure in Phpmyadmin

CVE-2013-4998

phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

Affected products

  • Phpmyadmin — versions 3.5.0.0, 3.5.1.0, 3.5.2.0
  • N/a — versions n/a

Weakness classification (CWE)

References