NetSight
IP …
medium5.0

CVE-2010-4481

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which call…

Impact

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

Affected products

VendorProductAffected versions
PhpmyadminPhpmyadmin
through 3.3.9.0
Versions 2.11.0, 2.11.1.0, 2.11.1.1, 2.11.1.2, 2.11.2.0

Weakness classification

CWE-287

References