Description
phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or (2) libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Selected Text Sharer Multiple Vulnerabilities (1.0)
Oracle Database Server CVE-2020-2510 Vulnerability (CVE-2020-2510)
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-8286)
WordPress Plugin WordPress Responsive Preview Cross-Site Scripting (1.1)