| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin | = 4.4.1= 4.4.1.1= 4.4.10= 4.4.11= 4.4.12= 4.4.13= 4.4.13.1= 4.4.14.1= 4.4.15= 4.4.15.1= 4.4.15.2= 4.4.15.3= 4.4.2= 4.4.3= 4.4.4= 4.4.5= 4.4.6= 4.4.6.1= 4.4.7= 4.4.8= 4.4.9= 4.5.0= 4.5.0.1= 4.5.0.2= 4.5.1= 4.5.2= 4.5.3 |
phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or (2) libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free