{"action":"Upgrade phpmyadmin/phpmyadmin to 2.11.11.2 or later.","affected":[{"fixed":"2.11.11.2","introduced":"2.11.0"},{"fixed":"3.3.9.1","introduced":"3.3.0"}],"component":"phpmyadmin/phpmyadmin","cve_ids":["CVE-2011-0986"],"ecosystem":"Packagist","epss":0.01558,"exploited":false,"fixed_versions":["2.11.11.2","3.3.9.1"],"ghsa_id":"GHSA-wcmm-28rg-mg3r","id":"tcs_01M5KFA0E2N8FG9EGYT10E3C8H","modified_at":"2025-04-12T02:27:09.437861Z","published_at":"2022-05-17T02:01:32Z","references":["https://osv.dev/vulnerability/GHSA-wcmm-28rg-mg3r","https://nvd.nist.gov/vuln/detail/CVE-2011-0986","https://exchange.xforce.ibmcloud.com/vulnerabilities/65424","https://github.com/phpmyadmin/phpmyadmin","http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html","http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=035d002db1e1201e73e560d7d98591563b506a83","http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=035d002db1e1201e73e560d7d98591563b506a83","http://www.mandriva.com/security/advisories?name=MDVSA-2011:026","http://www.phpmyadmin.net/home_page/security/PMASA-2011-1.php"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wcmm-28rg-mg3r","url":"https://osv.dev/vulnerability/GHSA-wcmm-28rg-mg3r"}],"summary":"phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file"}