CVE-2010-4481: Medium severity phpMyAdmin phpMyAdmin vulnerability
Published Dec 17, 2010
·Updated
phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.
Affected Software
66 affected componentsFixes available
phpMyAdmin phpMyAdmin<=3.3.9.0
phpMyAdmin phpMyAdmin=2.11.0
phpMyAdmin phpMyAdmin=2.11.1.0
phpMyAdmin phpMyAdmin=2.11.1.1
phpMyAdmin phpMyAdmin=2.11.1.2
phpMyAdmin phpMyAdmin=2.11.2.0
phpMyAdmin phpMyAdmin=2.11.2.1
phpMyAdmin phpMyAdmin=2.11.2.2
phpMyAdmin phpMyAdmin=2.11.3.0
phpMyAdmin phpMyAdmin=2.11.4.0
phpMyAdmin phpMyAdmin=2.11.5.0
phpMyAdmin phpMyAdmin=2.11.5.1
phpMyAdmin phpMyAdmin=2.11.5.2
phpMyAdmin phpMyAdmin=2.11.6.0
phpMyAdmin phpMyAdmin=2.11.7.0
phpMyAdmin phpMyAdmin=2.11.7.1
phpMyAdmin phpMyAdmin=2.11.8.0
phpMyAdmin phpMyAdmin=2.11.9.0
phpMyAdmin phpMyAdmin=2.11.9.1
phpMyAdmin phpMyAdmin=2.11.9.2
phpMyAdmin phpMyAdmin=2.11.9.3
phpMyAdmin phpMyAdmin=2.11.9.4
phpMyAdmin phpMyAdmin=2.11.9.5
phpMyAdmin phpMyAdmin=2.11.9.6
phpMyAdmin phpMyAdmin=2.11.10.0
phpMyAdmin phpMyAdmin=2.11.10.1
phpMyAdmin phpMyAdmin=3.0.0
phpMyAdmin phpMyAdmin=3.0.0-alpha
phpMyAdmin phpMyAdmin=3.0.0-beta
phpMyAdmin phpMyAdmin=3.0.0-rc1
phpMyAdmin phpMyAdmin=3.0.1
phpMyAdmin phpMyAdmin=3.0.1-rc1
phpMyAdmin phpMyAdmin=3.0.1.1
phpMyAdmin phpMyAdmin=3.1.0
phpMyAdmin phpMyAdmin=3.1.0-beta1
phpMyAdmin phpMyAdmin=3.1.1
phpMyAdmin phpMyAdmin=3.1.1-rc1
phpMyAdmin phpMyAdmin=3.1.2
phpMyAdmin phpMyAdmin=3.1.2-rc1
phpMyAdmin phpMyAdmin=3.1.3
phpMyAdmin phpMyAdmin=3.1.3-rc1
phpMyAdmin phpMyAdmin=3.1.3.1
phpMyAdmin phpMyAdmin=3.1.3.2
phpMyAdmin phpMyAdmin=3.1.4
phpMyAdmin phpMyAdmin=3.1.4-rc2
phpMyAdmin phpMyAdmin=3.1.5
phpMyAdmin phpMyAdmin=3.1.5-rc1
phpMyAdmin phpMyAdmin=3.2.0
phpMyAdmin phpMyAdmin=3.2.0-beta1
phpMyAdmin phpMyAdmin=3.2.0-rc1
phpMyAdmin phpMyAdmin=3.2.1
phpMyAdmin phpMyAdmin=3.2.1-rc1
phpMyAdmin phpMyAdmin=3.2.2
phpMyAdmin phpMyAdmin=3.2.2-rc1
phpMyAdmin phpMyAdmin=3.3.0.0
phpMyAdmin phpMyAdmin=3.3.1.0
phpMyAdmin phpMyAdmin=3.3.2.0
phpMyAdmin phpMyAdmin=3.3.3.0
phpMyAdmin phpMyAdmin=3.3.4.0
phpMyAdmin phpMyAdmin=3.3.5.0
phpMyAdmin phpMyAdmin=3.3.5.1
phpMyAdmin phpMyAdmin=3.3.6
phpMyAdmin phpMyAdmin=3.3.7
phpMyAdmin phpMyAdmin=3.3.8
phpMyAdmin phpMyAdmin=3.3.8.1
composer/phpmyadmin/phpmyadmin<3.4.0-beta1
3.4.0-beta1
Remediation
Event History
Dec 17, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·05:44 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-4481?
CVE-2010-4481 has a medium severity rating, indicating it can be exploited to bypass authentication.
2
How do I fix CVE-2010-4481?
To fix CVE-2010-4481, upgrade phpMyAdmin to version 3.4.0-beta1 or later.
3
What versions of phpMyAdmin are affected by CVE-2010-4481?
CVE-2010-4481 affects phpMyAdmin versions prior to 3.4.0-beta1, including versions 2.11.x and 3.x series.
4
Can CVE-2010-4481 lead to data exposure?
Yes, CVE-2010-4481 can potentially allow remote attackers to access sensitive information.
5
Is there a workaround for CVE-2010-4481?
A temporary workaround for CVE-2010-4481 is to restrict access to phpinfo.php by implementing IP whitelisting.