Description
phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, which reveals the path in an error message.
Remediation
References
Related Vulnerabilities
osCommerce Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-18573)
Magento Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2019-8154)
OpenVPN AS Improper Authentication Vulnerability (CVE-2020-15077)
WordPress Plugin Twenty20 Image Before-After Malicious Code (1.6.3)
WordPress Plugin Apptivo Business Site CRM Multiple Cross-Site Scripting Vulnerabilities (1.2.9)