CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1902

show_config_errors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message about this missing file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2012-1902

Phpmyadmin » Phpmyadmin » Version: 3.4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.0.0
Phpmyadmin » Phpmyadmin » Version: 3.4.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.1.0
Phpmyadmin » Phpmyadmin » Version: 3.4.10.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.10.0
Phpmyadmin » Phpmyadmin » Version: 3.4.10.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.10.1
Phpmyadmin » Phpmyadmin » Version: 3.4.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.2.0
Phpmyadmin » Phpmyadmin » Version: 3.4.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.0
Phpmyadmin » Phpmyadmin » Version: 3.4.3.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.1
Phpmyadmin » Phpmyadmin » Version: 3.4.3.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.2
Phpmyadmin » Phpmyadmin » Version: 3.4.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.4.0
Phpmyadmin » Phpmyadmin » Version: 3.4.5.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.5.0
Phpmyadmin » Phpmyadmin » Version: 3.4.6.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.6.0
Phpmyadmin » Phpmyadmin » Version: 3.4.7.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.7.0
Phpmyadmin » Phpmyadmin » Version: 3.4.7.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.7.1
Phpmyadmin » Phpmyadmin » Version: 3.4.8.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.8.0
Phpmyadmin » Phpmyadmin » Version: 3.4.9.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1902

Products

Pricing

Contact Us