~ / search / GHSA-gmc7-jvv7-w245

GHSA-gmc7-jvv7-w245

phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information

Source: GitHub Advisory Database (reviewed) High CVE-2010-4481

Packages

EcosystemPackageAffectedFixed in
Packagist phpmyadmin/phpmyadmin < 3.4.0-beta1 3.4.0-beta1

Details

As written in the advisory (Markdown source, shown as plain text).

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

References

External links from the advisory. They lead to third-party sites.