Total vulnerabilities in the database
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
| Software | From | Fixed in |
|---|---|---|
| phpmyadmin / phpmyadmin | 3.5.1.0 | 3.5.1.0.x |
| phpmyadmin / phpmyadmin | 3.5.2.0 | 3.5.2.0.x |
| phpmyadmin / phpmyadmin | 3.5.0.0 | 3.5.0.0.x |