Lucene search

K
osvGoogleOSV:GHSA-VX8Q-J7H9-VF6Q
HistoryMar 11, 2022 - 12:02 a.m.

Exposure of Sensitive Information to an Unauthorized Actor in PhpMyAdmin

2022-03-1100:02:24
Google
osv.dev
29
phpmyadmin
security
unauthorized access
information exposure

EPSS

0.002

Percentile

51.8%

PhpMyAdmin before 5.1.3 allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.