Description
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Remediation
References
Related Vulnerabilities
osTicket Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2019-14749)
WordPress Plugin WangGuard Multiple Vulnerabilities (1.7.2)
Oracle Application Server Other Vulnerability (CVE-2004-1707)
WordPress Plugin Related Posts Cross-Site Scripting (5.12.91)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0211)