Test ID:	1.3.6.1.4.1.25623.1.0.807055
Category:	Web application abuses
Title:	phpMyAdmin Information Disclosure Vulnerability
Summary:	phpMyAdmin is prone to an information disclosure vulnerability.
Description:	Summary: phpMyAdmin is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to recommended setting of the PHP configuration directive display_errors is set to on, which is against the recommendations given in the PHP manual for a production server. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information about the server. Affected Software/OS: phpMyAdmin versions 4.0.x prior to 4.0.10.12, 4.4.x prior to 4.4.15.2 and 4.5.x prior to 4.5.3.1 Solution: Upgrade to phpMyAdmin version 4.0.10.12 or 4.4.15.2 or 4.5.3.1 or later or apply the patch from the linked references. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8669 http://www.securitytracker.com/id/1034806 SuSE Security Announcement: openSUSE-SU-2016:0067 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00014.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.