CVE-2016-2038

Published Feb 20, 2016 CVSS 3.0 · 5.3 Medium EPSS 2.6% KEV · Not listed
Description
phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-481-1 phpmyadmin security update
Debian DLA Debian DLA DLA-481-2 phpmyadmin regression update
EUVD EUVD EUVD-2016-3146 phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.
History

No history.

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 11:17 PM
Reserved
Jan 22, 2016, 12:00 AM
Status
Modified
Published
Feb 20, 2016, 1:59 AM
Modified
Jun 17, 2026, 12:43 AM