tocsin

Debian/phpmyadmin: unknown

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

Action: Upgrade phpmyadmin to 4:3.3.7-3 or later.

Affected

introducedfixedlast affected
04:3.3.7-3-

Fixed versions

4:3.3.7-3

Sources

published · modified · JSON