Description

phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to config.default.php and other files.

Remediation

References

CVE-2013-5000

Related Vulnerabilities

Oracle JRE CVE-2013-0444 Vulnerability (CVE-2013-0444)

XWiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4641)

Magento Insufficient Session Expiration Vulnerability (CVE-2021-21032)

Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7415)

WebLogic Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-23457)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2013-5000