CVE-2013-4999: Infoleak
Published Jul 30, 2013
·Updated
phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and ErrorHandler.class.php.
Affected Software
8 affected components
phpMyAdmin phpMyAdmin=4.0.0
phpMyAdmin phpMyAdmin=4.0.0-rc2
phpMyAdmin phpMyAdmin=4.0.0-rc3
phpMyAdmin phpMyAdmin=4.0.1
phpMyAdmin phpMyAdmin=4.0.2
phpMyAdmin phpMyAdmin=4.0.3
phpMyAdmin phpMyAdmin=4.0.4
phpMyAdmin phpMyAdmin=4.0.4.1
Event History
Jul 30, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4999?
CVE-2013-4999 is classified as a medium severity vulnerability.
2
How do I fix CVE-2013-4999?
To fix CVE-2013-4999, upgrade to phpMyAdmin version 4.0.4.2 or later.
3
Who is affected by CVE-2013-4999?
CVE-2013-4999 affects phpMyAdmin versions 4.0.0 through 4.0.4.1.
4
What type of vulnerability is CVE-2013-4999?
CVE-2013-4999 is an information disclosure vulnerability.
5
What information does CVE-2013-4999 leak?
CVE-2013-4999 can leak the installation path of phpMyAdmin through error messages.