CVE-2010-4481

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-12-17 · updated 2026-06-16
Weakness: CWE-287

Description

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

Affected products

phpMyAdmin: through 3.3.9.0; 2.11.0, 2.11.1.0, 2.11.1.1, 2.11.1.2, 2.11.2.0, 2.11.2.1 (+58)

References

http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=4d9fd005671b05c4d74615d5939ed45e4d019e4c
http://secunia.com/advisories/42485
http://secunia.com/advisories/42725
http://www.debian.org/security/2010/dsa-2139
http://www.mandriva.com/security/advisories?name=MDVSA-2011:000
http://www.phpmyadmin.net/home_page/security/PMASA-2010-10.php
http://www.vupen.com/english/advisories/2010/3238
http://www.vupen.com/english/advisories/2011/0001
http://www.vupen.com/english/advisories/2011/0027
http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=4d9fd005671b05c4d74615d5939ed45e4d019e4c
http://secunia.com/advisories/42485
http://secunia.com/advisories/42725

Get alerted when CVE-2010-4481 or the next vulnerability affects your stack