Description

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.

Remediation

References

CVE-2013-4999

Related Vulnerabilities

DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49459)

Joomla! Core 1.5.x Multiple Cross-Site Scripting Vulnerabilities (1.5.0 - 1.5.20)

Moodle Improper Input Validation Vulnerability (CVE-2011-4302)

Next.js Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2022-36046)

WordPress Plugin AJAX Post Search 'srch_txt' Parameter SQL Injection (1.2)

Severity

Medium

Classification

CVE-2013-4999 CWE-200

Tags

Missing Update Known Vulnerabilities