CVE-2011-0986
published 2011-02-14CVE-2011-0986: phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files…
PriorityP426medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.56%
72.4th percentile
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Affected
60 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | phpmyadmin | < phpmyadmin 4:3.3.9.2-1 (bookworm) | phpmyadmin 4:3.3.9.2-1 (bookworm) |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
ghsa·2022-05-17
CVE-2011-0986 [MEDIUM] CWE-20 phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
OSV
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
osv·2022-05-17
CVE-2011-0986 [MEDIUM] phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
OSV
CVE-2011-0986: phpMyAdmin 2
osv·2011-02-14·CVSS 5.0
CVE-2011-0986 [MEDIUM] CVE-2011-0986: phpMyAdmin 2
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Debian
CVE-2011-0986: phpmyadmin - phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly ...
vendor_debian·2011·CVSS 5.0
CVE-2011-0986 [MEDIUM] CVE-2011-0986: phpmyadmin - phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly ...
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Scope: local
bookworm: resolved (fixed in 4:3.3.9.2-1)
bullseye: resolved (fixed in 4:3.3.9.2-1)
forky: resolved (fixed in 4:3.3.9.2-1)
sid: resolved (fixed in 4:3.3.9.2-1)
trixie: resolved (fixed in 4:3.3.9.2-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.htmlhttp://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83http://secunia.com/advisories/43478http://www.mandriva.com/security/advisories?name=MDVSA-2011:026http://www.phpmyadmin.net/home_page/security/PMASA-2011-1.phphttp://www.vupen.com/english/advisories/2011/0385https://exchange.xforce.ibmcloud.com/vulnerabilities/65424http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.htmlhttp://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83http://secunia.com/advisories/43478http://www.mandriva.com/security/advisories?name=MDVSA-2011:026http://www.phpmyadmin.net/home_page/security/PMASA-2011-1.phphttp://www.vupen.com/english/advisories/2011/0385https://exchange.xforce.ibmcloud.com/vulnerabilities/65424
2011-02-14
Published