CVE-2010-4481: phpMyAdmin

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

Affected products

• phpMyAdmin phpMyAdmin: up to and including 3.3.9.0; version 2.11.0 only; version 2.11.1.0 only; version 2.11.1.1 only; version 2.11.1.2 only; version 2.11.2.0 only; …

Published 2010-12-17. Last modified 2026-06-16.