PT-2016-7847 · Phpmyadmin+1 · Phpmyadmin+1
E3Amn2L
·
Publicado
2016-12-07
·
Atualizado
2024-06-15
·
CVE-2016-9854
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
phpMyAdmin versions 4.4.x through 4.4.15.8
phpMyAdmin versions 4.6.x through 4.6.4
Description
An issue in phpMyAdmin allows it to display a PHP error message containing the full path of the directory where phpMyAdmin is installed when certain scripts are called in an unexpected way. Additionally, during an execution timeout in the export functionality, errors with the full path are written to the export file.
Recommendations
For phpMyAdmin versions 4.4.x through 4.4.15.8, update to version 4.4.15.9 or later.
For phpMyAdmin versions 4.6.x through 4.6.4, update to version 4.6.5 or later.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Phpmyadmin