CVE-2011-3646
CVE-2011-3646
This page contains facts from public vulnerability sources. Check the original advisory before updating.
phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js_frame parameter to phpmyadmin.css.php, which reveals the installation path in an error message.
EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phpmyadmin Debian:12
- Affected ranges
- ECOSYSTEM: < 4:3.4.6-1
Update to 4:3.4.6-1
phpmyadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 4:3.4.6-1
Update to 4:3.4.6-1
phpmyadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 4:3.4.6-1
Update to 4:3.4.6-1
Original sources
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-15.php
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069235.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html
- http://secunia.com/advisories/46874
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069234.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:158
- https://nvd.nist.gov/vuln/detail/CVE-2011-3646