vulnerability

FreeBSD: phpmyadmin -- Multiple full path disclosure vulnerabilities (CVE-2016-2038)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Jan 28, 2016
Added
Jan 29, 2016
Modified
Oct 30, 2017

Description

phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.

Solution

freebsd-upgrade-package-phpmyadmin
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.