CVE-2012-4219
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain...
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
Exploit likelihood
What each source reports
NVD Score used
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
- Record
CVE-2012-4219- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
- Record
CVE-2012-4219- Updated
- 2026-11-02
EUVDEUVD-2012-4163 No score
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
- Record
EUVD-2012-4163- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8vv2-p6c9-46c2 No score
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain...
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
- Record
GHSA-8vv2-p6c9-46c2- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
- Record
CVE-2012-4219- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4219 No score
show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
- Record
DEBIAN-CVE-2012-4219- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10054-1 No score
phpMyAdmin-4.6.5.2-1.1 on GA media
These are all security issues fixed in the phpMyAdmin-4.6.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10054-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpmyadminDebian:12 |
before 4:4.0.1-1 | 4:4.0.1-1 |
phpmyadminDebian:13 |
before 4:4.0.1-1 | 4:4.0.1-1 |
phpmyadminDebian:14 |
before 4:4.0.1-1 | 4:4.0.1-1 |
phpMyAdminopenSUSE:Tumbleweed |
before 4.6.5.2-1.1 | 4.6.5.2-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4219 is a medium vulnerability (CVSS 5.0) in Phpmyadmin, published August 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in phpmyadmin 4:4.0.1-1.
References
github.com/phpmyadmin/phpmyadmin/commit/0f0c2f1e2b3ece41cc1bb99a9931c8fcc7c917bc
phpmyadmin.net/home_page/security/PMASA-2012-3.php
hermes.opensuse.org/messages/15513071
nvd.nist.gov/vuln/detail/CVE-2012-4219
security-tracker.debian.org/tracker/CVE-2012-4219
Show 124 moreShow less
suse.com/security/cve/CVE-2011-4107