PT-2010-5491 · Phpmyadmin · Phpmyadmin

Jörg Sommer · Published 2010-12-17 · Updated 2022-05-17 · CVE-2010-4481

Positive Technologies (AI Summary)

CVSS v4.0

8.0

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 3.4.0-beta1

Description The issue allows remote attackers to bypass authentication and obtain sensitive information by making a direct request to "phpinfo.php", which calls the phpinfo() function.

Recommendations For versions prior to 3.4.0-beta1, update to version 3.4.0-beta1 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2010-4481

DSA-2139-1

GHSA-GMC7-JVV7-W245

Affected Products

Phpmyadmin

References · 17

• http://mandriva.com/security/advisories?name=MDVSA-2011:000 · Vendor Advisory
• http://debian.org/security/2010/dsa-2139 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-4481 · Vendor Advisory
• http://secunia.com/advisories/42485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4481 · Security Note
• http://vupen.com/english/advisories/2011/0001 · Vendor Advisory
• http://vupen.com/english/advisories/2010/3238 · Vendor Advisory
• http://phpmyadmin.net/home_page/security/PMASA-2010-10.php · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4481 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gmc7-jvv7-w245 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-4481 · Vendor Advisory
• http://secunia.com/advisories/42725 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0027 · Vendor Advisory
• https://github.com/phpmyadmin/phpmyadmin · Note
• http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=4d9fd005671b05c4d74615d5939ed45e4d019e4c · Note