Information disclosure in Phpmyadmin

CVE-2013-4999

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

Affected products

  • Phpmyadmin — versions 4.0.0, 4.0.1, 4.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References