H3-2022-0055¶

phpMyAdmin Setup Page Exposed

Description¶

phpMyAdmin is an application written in the PHP language that provides a web-based interface for the administration of MySQL databases.

Impact¶

Best practice is to remove or limit access to un-needed information. Access to the setup page could provide information to attacker for future exploitation.

References¶

• phpMyAdmin Docs
• CWE-200: Exposure of Sensitive Information to an Unauthorized Actor