Unrated severityNVD Advisory· Published Aug 21, 2012· Updated Jun 16, 2026

CVE-2012-4219

Description

show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PhpMyAdmin/phpMyAdmin4 versions
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.0:*:*:*:*:*:*:*
- (no CPE)range: >=3.5, <3.5.2.1
osv-coords
pkg:rpm/opensuse/phpMyAdmin&distro=openSUSE%20Tumbleweed
Range: < 4.6.5.2-1.1

Patches

Vulnerability mechanics

References

github.com/phpmyadmin/phpmyadmin/commit/0f0c2f1e2b3ece41cc1bb99a9931c8fcc7c917bcnvdExploit
www.phpmyadmin.net/home_page/security/PMASA-2012-3.phpnvdVendor Advisory
hermes.opensuse.org/messages/15513071nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000