Vulnerability Details CVE-2016-5098
Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.3%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html
- http://www.securitytracker.com/id/1035980
- https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-15
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html
- http://www.securitytracker.com/id/1035980
- https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-15
Products affected by CVE-2016-5098
-
cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2
-
cpe:2.3:o:opensuse:opensuse:13.1