CVE-2011-0986: phpMyAdmin Path Disclosure Vulnerability
Summary
CVE-2011-0986: phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file. Affects phpmyadmin/phpmyadmin across 2 version ranges.
>= 2.11.0, < 2.11.11.2
>= 3.3.0, < 3.3.9.1
Fixed in 2.11.11.2 or 3.3.9.1, depending on the release line you run. How to fix ↓
Also tracked for
- phpmyadmin · Debian:11
The same CVE-2011-0986 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely used open-source tool for managing MySQL databases through a web interface. It provides a user-friendly way to perform database operations, including creating, modifying, and deleting databases and tables. The tool is known for its extensive features, including support for multiple languages, import/export capabilities, and user management. However, certain versions of phpMyAdmin are vulnerable to a path disclosure issue, which can expose sensitive information about the installation path to remote attackers.
Vulnerability Detail
The vulnerability arises from improper handling of requests for nonexistent files in phpMyAdmin versions 2.11.x before 2.11.11.2 and 3.3.x before 3.3.9.1. When a remote attacker requests a file that does not exist, the application inadvertently reveals the installation path of the software. This information can be exploited by attackers to launch further attacks, potentially leading to unauthorized access or data breaches. The vulnerability is classified under CWE-20 (Improper Input Validation) and CWE-22 (Improper Limitation of a Pathname to a Restricted Directory).
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 2.11.0, < 2.11.11.22.11.11.2composer require phpmyadmin/phpmyadmin:2.11.11.2 -
>= 3.3.0, < 3.3.9.13.3.9.1composer require phpmyadmin/phpmyadmin:3.3.9.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can restrict access to the phpMyAdmin directory through web server configuration settings, such as using .htaccess files or server-level configurations to prevent unauthorized access to the application.
Conclusion
In summary, the CVE-2011-0986 vulnerability in phpMyAdmin poses a significant risk by allowing remote attackers to disclose the installation path. It is crucial for users to update to the latest patched versions to safeguard their applications. Implementing temporary workarounds can also help mitigate risks until the update is applied.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
The vulnerability allows remote attackers to obtain the installation path of phpMyAdmin by requesting nonexistent files.
The affected versions are phpMyAdmin 2.11.x before 2.11.11.2 and 3.3.x before 3.3.9.1.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The exposure of the installation path can lead to further attacks, including unauthorized access to sensitive data or exploitation of other vulnerabilities.
Yes, you can restrict access to the phpMyAdmin directory using web server configurations to prevent unauthorized access until you can apply the update.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
