QwikSec

Security Database

CVE

CWE

Training

CVE-2011-0986

Published: Feb 14, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

phpmyadmin-readme-path-disclosure(65424)

vdb-entry

x_refsource_XF

http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

FEDORA-2011-1408

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_MANDRIVA

FEDORA-2011-1373

vendor-advisory

x_refsource_FEDORA

http://www.phpmyadmin.net/home_page/security/PMASA-2011-1.php

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.