CVEvulnerability
CVE-2011-0986
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-02-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Affected configurations
• phpmyadmin phpmyadmin 2.11.0
• phpmyadmin phpmyadmin 2.11.1.0
• phpmyadmin phpmyadmin 2.11.1.1
• phpmyadmin phpmyadmin 2.11.1.2
• phpmyadmin phpmyadmin 2.11.2.0
• phpmyadmin phpmyadmin 2.11.2.1
• phpmyadmin phpmyadmin 2.11.2.2
• phpmyadmin phpmyadmin 2.11.3.0
• phpmyadmin phpmyadmin 2.11.4.0
• phpmyadmin phpmyadmin 2.11.5.0
• phpmyadmin phpmyadmin 2.11.5.1
• phpmyadmin phpmyadmin 2.11.5.2
• phpmyadmin phpmyadmin 2.11.6.0
• phpmyadmin phpmyadmin 2.11.7.0
• phpmyadmin phpmyadmin 2.11.7.1
• phpmyadmin phpmyadmin 2.11.8.0
• phpmyadmin phpmyadmin 2.11.9.0
• phpmyadmin phpmyadmin 2.11.9.1
• phpmyadmin phpmyadmin 2.11.9.2
• phpmyadmin phpmyadmin 2.11.9.3
• phpmyadmin phpmyadmin 2.11.9.4
• phpmyadmin phpmyadmin 2.11.9.5
• phpmyadmin phpmyadmin 2.11.9.6
• phpmyadmin phpmyadmin 2.11.10.0
• phpmyadmin phpmyadmin 2.11.10.1
• phpmyadmin phpmyadmin 2.11.11
• phpmyadmin phpmyadmin 2.11.11.1
• phpmyadmin phpmyadmin 3.0.0
• phpmyadmin phpmyadmin 3.0.1
• phpmyadmin phpmyadmin 3.0.1.1
• phpmyadmin phpmyadmin 3.1.0
• phpmyadmin phpmyadmin 3.1.1
• phpmyadmin phpmyadmin 3.1.2
• phpmyadmin phpmyadmin 3.1.3
• phpmyadmin phpmyadmin 3.1.3.1
• phpmyadmin phpmyadmin 3.1.3.2
• phpmyadmin phpmyadmin 3.1.4
• phpmyadmin phpmyadmin 3.1.5
• phpmyadmin phpmyadmin 3.2.0
• phpmyadmin phpmyadmin 3.2.1
• phpmyadmin phpmyadmin 3.2.2
• phpmyadmin phpmyadmin 3.3.0.0
• phpmyadmin phpmyadmin 3.3.1.0
• phpmyadmin phpmyadmin 3.3.2.0
• phpmyadmin phpmyadmin 3.3.3.0
• phpmyadmin phpmyadmin 3.3.4.0
• phpmyadmin phpmyadmin 3.3.5.0
• phpmyadmin phpmyadmin 3.3.5.1
• phpmyadmin phpmyadmin 3.3.6
• phpmyadmin phpmyadmin 3.3.7
• phpmyadmin phpmyadmin 3.3.8
• phpmyadmin phpmyadmin 3.3.8.1
• phpmyadmin phpmyadmin 3.3.9.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html lists.fedoraproject.org
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83 phpmyadmin.git.sourceforge.net
- http://secunia.com/advisories/43478 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:026 www.mandriva.com
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-1.php Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0385 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65424 exchange.xforce.ibmcloud.com
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html lists.fedoraproject.org
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83 phpmyadmin.git.sourceforge.net
- http://secunia.com/advisories/43478 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:026 www.mandriva.com
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-1.php Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0385 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65424 exchange.xforce.ibmcloud.com