CVE-2016-9855

An issue was discovered in phpMyAdmin

published December 11, 2016

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the export functionality, the errors containing the full path of the directory of phpMyAdmin are written to the export file. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the PMA_shutdownDuringExport issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02497 · 84.5th percentile
Published
2016-12-11T02:00Z
EPSS history
Timeline
  • 11 DEC 02:00Z
    An issue was discovered in phpMyAdmin
    cvelistv5