Version Disclosure (phpMyAdmin)

Severity:

Low

Summary

Invicti identified a version disclosure (phpMyAdmin) in the target web server's HTTP response.

This information might help an attacker gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of phpMyAdmin.

Impact

An attacker might use the disclosed information to harvest specific security vulnerabilities for the version identified.

Remediation

Configure your web server to prevent public access to the phpMyAdmin directory by implementing access control mechanisms.

Required Skills for Successful Exploitation

Actions To Take

Classifications

CAPEC-170

CWE-205

HIPAA-164.306(a), 164.308(a)

Vulnerability Index

You can search and find all vulnerabilities

Select Category

Select Vulnerability

Related Vulnerabilities

Code Execution via SSTI (Node.js Dot)

Phorum Detected

Code Execution via SSTI (PHP Twig)

data: Used in a Content Security Policy (CSP) Directive

Serendipity Detected

Version Disclosure (phpMyAdmin)

Vulnerability Index

Select Category

Select Vulnerability

Featured resources

Build your resistance to threats. And save hundreds of hours each month.