CVE-2012-1902
EPSS 0.47%Published: 4/6/2012Modified: 5/7/2026
Description
show_config_errors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message about this missing file.
Affected packages (1)
- Debian/phpmyadminfrom 0, < 4:3.4.10.2-1