ID de Prueba:	1.3.6.1.4.1.25623.1.0.802430
Categoría:	Web application abuses
Título:	phpMyAdmin Information Disclosure Vulnerability (PMASA-2012-2) - Active Check
Resumen:	phpMyAdmin is prone to an information disclosure vulnerability.
Descripción:	Summary: phpMyAdmin is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an input validation error in 'show_config_errors.php'. When a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request. Vulnerability Impact: Successful exploitation will allow attacker to obtain sensitive information that could aid in further attacks. Affected Software/OS: phpMyAdmin version 3.4.10.2 and prior. Solution: Update to version 3.4.10.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1902 BugTraq ID: 52858 http://www.securityfocus.com/bid/52858 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079566.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079475.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079435.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:050 XForce ISS Database: phpmyadmin-showconfigerrors-path-disclosure(74608) https://exchange.xforce.ibmcloud.com/vulnerabilities/74608
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.