CVE-2016-2038

Published Feb 20, 2016 CVSS 3.0 · 5.3 Medium EPSS 2.6% KEV · Not listed
Description
phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-481-1 phpmyadmin security update
Debian DLA Debian DLA DLA-481-2 phpmyadmin regression update
EUVD EUVD EUVD-2016-3146 phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 11:17 PM
Reserved
Jan 22, 2016, 12:00 AM
Status
Modified
Published
Feb 20, 2016, 1:59 AM
Modified
Jun 17, 2026, 12:43 AM