VULNERABILITY INTELLIGENCE
CVE-2011-0986
CVSS score5 MEDIUM
EPSS probability1.56%
CISA KEVNot currently listed
Published2011-02-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Weakness classification
- CWE-20: Improper Input Validation