| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin | < 2.11.5.1 | 2.11.5.1 |
phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free