Information disclosure in Phpmyadmin

CVE-2013-5000

phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to config.default.php and other files.

Vulnerability class: Information Disclosure

EPSS: 0.013 (66.7th percentile) — read the EPSS interpretation.

Affected products

  • Phpmyadmin — versions 3.5.0.0, 3.5.1.0, 3.5.2.0
  • N/a — versions n/a

Weakness classification (CWE)

References