phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-02-14 14:00
Updated : 2017-08-16 18:33
NVD link : CVE-2011-0986
Mitre link : CVE-2011-0986
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
phpmyadmin
- phpmyadmin