medium5.3
CVE-2016-5098
Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of…
Impact
Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyadmin | Phpmyadmin | Version 4.6.2 |
| Opensuse | Opensuse | Version 13.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html
- http://www.securitytracker.com/id/1035980
- https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-15
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html
- http://www.securitytracker.com/id/1035980
- https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-15