CVEvulnerability

CVE-2011-0986

5.0 MEDIUM Published 2011-02-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-20

Description

phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.

Affected configurations

• phpmyadmin phpmyadmin 2.11.0 • phpmyadmin phpmyadmin 2.11.1.0 • phpmyadmin phpmyadmin 2.11.1.1 • phpmyadmin phpmyadmin 2.11.1.2 • phpmyadmin phpmyadmin 2.11.2.0 • phpmyadmin phpmyadmin 2.11.2.1 • phpmyadmin phpmyadmin 2.11.2.2 • phpmyadmin phpmyadmin 2.11.3.0 • phpmyadmin phpmyadmin 2.11.4.0 • phpmyadmin phpmyadmin 2.11.5.0 • phpmyadmin phpmyadmin 2.11.5.1 • phpmyadmin phpmyadmin 2.11.5.2 • phpmyadmin phpmyadmin 2.11.6.0 • phpmyadmin phpmyadmin 2.11.7.0 • phpmyadmin phpmyadmin 2.11.7.1 • phpmyadmin phpmyadmin 2.11.8.0 • phpmyadmin phpmyadmin 2.11.9.0 • phpmyadmin phpmyadmin 2.11.9.1 • phpmyadmin phpmyadmin 2.11.9.2 • phpmyadmin phpmyadmin 2.11.9.3 • phpmyadmin phpmyadmin 2.11.9.4 • phpmyadmin phpmyadmin 2.11.9.5 • phpmyadmin phpmyadmin 2.11.9.6 • phpmyadmin phpmyadmin 2.11.10.0 • phpmyadmin phpmyadmin 2.11.10.1 • phpmyadmin phpmyadmin 2.11.11 • phpmyadmin phpmyadmin 2.11.11.1 • phpmyadmin phpmyadmin 3.0.0 • phpmyadmin phpmyadmin 3.0.1 • phpmyadmin phpmyadmin 3.0.1.1 • phpmyadmin phpmyadmin 3.1.0 • phpmyadmin phpmyadmin 3.1.1 • phpmyadmin phpmyadmin 3.1.2 • phpmyadmin phpmyadmin 3.1.3 • phpmyadmin phpmyadmin 3.1.3.1 • phpmyadmin phpmyadmin 3.1.3.2 • phpmyadmin phpmyadmin 3.1.4 • phpmyadmin phpmyadmin 3.1.5 • phpmyadmin phpmyadmin 3.2.0 • phpmyadmin phpmyadmin 3.2.1 • phpmyadmin phpmyadmin 3.2.2 • phpmyadmin phpmyadmin 3.3.0.0 • phpmyadmin phpmyadmin 3.3.1.0 • phpmyadmin phpmyadmin 3.3.2.0 • phpmyadmin phpmyadmin 3.3.3.0 • phpmyadmin phpmyadmin 3.3.4.0 • phpmyadmin phpmyadmin 3.3.5.0 • phpmyadmin phpmyadmin 3.3.5.1 • phpmyadmin phpmyadmin 3.3.6 • phpmyadmin phpmyadmin 3.3.7 • phpmyadmin phpmyadmin 3.3.8 • phpmyadmin phpmyadmin 3.3.8.1 • phpmyadmin phpmyadmin 3.3.9.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References