Medium severity5.3OSV Advisory· Published Jul 5, 2016· Updated Jun 17, 2026

CVE-2016-5098

Description

Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PhpMyAdmin/phpMyAdminOSV3 versions
RELEASE_2_2_0, RELEASE_2_2_1, RELEASE_2_2_2, …+ 2 more
- (no CPE)range: RELEASE_2_2_0, RELEASE_2_2_1, RELEASE_2_2_2, …
- cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*
- (no CPE)range: <4.6.2-prerelease
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8nvdPatch
www.phpmyadmin.net/security/PMASA-2016-15nvdPatchVendor Advisory
lists.opensuse.org/opensuse-updates/2016-06/msg00043.htmlnvd
www.securitytracker.com/id/1035980nvd
security.gentoo.org/glsa/201701-32nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000