CVE-2010-4481

Published Dec 17, 2010 CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Description
phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2139-1 New phpmyadmin packages fix several vulnerabilities
EUVD EUVD EUVD-2010-4449 phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information
Github GHSA Github GHSA GHSA-gmc7-jvv7-w245 phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:51 AM
Reserved
Dec 7, 2010, 12:00 AM
Status
Modified
Published
Dec 17, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:24 PM