CVE-2016-5730 — Sensitive Information Exposure in Phpmyadmin

CWE-200 — Sensitive Information Exposure9 documents5 sources
Severity
5.3MEDIUMNVD
EPSS
1.3%
top 20.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
PhpmyadminDebian PhpmyadminOpensuse Leap+1 more
Timeline
PublishedJul 3
Latest updateMay 14

Description

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value to FormDisplay.php, (2) incorrect data to validate.php, (3) unexpected data to Validator.php, (4) a missing config directory during setup, or (5) an incorrect OpenID identifier data type, which reveals the full path in an error message.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages6 packages

▶debiandebian/phpmyadmin< phpmyadmin 4:4.6.3-1 (bookworm)
▶Packagistphpmyadmin/phpmyadmin4.0 — 4.0.10.16+2
▶Debianphpmyadmin/phpmyadmin< 4:4.6.3-1+3
▶NVDphpmyadmin/phpmyadmin56 versions+55
▶NVDopensuse/leap42.1

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
phpMyAdmin full path disclosure vulnerability↗2022-05-14
▶
OSV
phpMyAdmin full path disclosure vulnerability↗2022-05-14
▶
OSV
CVE-2016-5730: phpMyAdmin 4↗2016-07-03
▶

📋Vendor Advisories

1
Debian
CVE-2016-5730: phpmyadmin - phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3...↗2016
▶

💬Community

4
Bugzilla
CVE-2016-5701 CVE-2016-5702 CVE-2016-5703 CVE-2016-5704 CVE-2016-5705 CVE-2016-5706 CVE-2016-5730 CVE-2016-5731 CVE-2016-5732 CVE-2016-5733 CVE-2016-5734 CVE-2016-5739 phpMyAdmin: 4.6.3, 4.4.15.7 and ↗2016-06-23
▶
Bugzilla
CVE-2016-5701 CVE-2016-5702 CVE-2016-5703 CVE-2016-5704 CVE-2016-5705 CVE-2016-5706 CVE-2016-5730 CVE-2016-5731 CVE-2016-5732 CVE-2016-5733 CVE-2016-5734 CVE-2016-5739 phpMyAdmin: 4.6.3, 4.4.15.7 and ↗2016-06-23
▶
Bugzilla
CVE-2016-5701 CVE-2016-5702 CVE-2016-5703 CVE-2016-5704 CVE-2016-5705 CVE-2016-5706 CVE-2016-5730 CVE-2016-5731 CVE-2016-5732 CVE-2016-5733 CVE-2016-5734 CVE-2016-5739 phpMyAdmin: 4.6.3, 4.4.15.7 and ↗2016-06-23
▶
Bugzilla
CVE-2016-5701 CVE-2016-5702 CVE-2016-5703 CVE-2016-5704 CVE-2016-5705 CVE-2016-5706 CVE-2016-5730 CVE-2016-5731 CVE-2016-5732 CVE-2016-5733 CVE-2016-5734 CVE-2016-5739 phpMyAdmin: 4.6.3, 4.4.15.7 and ↗2016-06-23
▶
CVE-2016-5730 — Sensitive Information Exposure | cvebase