PhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive information via a direct request for libraries/common.lib.php, which reveals the path in an error message.
| Software | From | Fixed in |
|---|---|---|
phpmyadmin / phpmyadmin
|
2.7.0_pl2 | 2.7.0_pl2.x |