CVE-2016-5730: opensuse leap
Vulnerability summary
CVE-2016-5730 is a medium (CVSS 5.3) vulnerability in opensuse leap. EPSS estimates a 2.62% chance of exploitation in the next 30 days, higher than 85.2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 03-07-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value to FormDisplay.php, (2) incorrect data to validate.php, (3) unexpected data to Validator.php, (4) a missing config directory during setup, or (5) an incorrect OpenID identifier data type, which reveals the full path in an error message.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
2.62%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.62% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- phpmyadmin< 4:4.6.3-1
Phpmyadmin1 product
- phpmyadminEOL4.0.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.4.1 | 4.0.4.2 | 4.0.5 | 4.0.6 | 4.0.7 | 4.0.8 | 4.0.9 | 4.0.10 | 4.0.10.1 | 4.0.10.2 | 4.0.10.3 | 4.0.10.4 | 4.0.10.5 | 4.0.10.6 | 4.0.10.7 | 4.0.10.8 | 4.0.10.9 | 4.0.10.10 | 4.0.10.11 | 4.0.10.12 | 4.0.10.13 | 4.0.10.14 | 4.0.10.15 | 4.6.0 | 4.6.0:alpha1 | 4.6.0:rc1 | 4.6.0:rc2 | 4.6.1 | 4.6.2 | 4.4.0 | 4.4.1 | 4.4.1.1 | 4.4.2 | 4.4.3 | 4.4.4 | 4.4.5 | 4.4.6 | 4.4.6.1 | 4.4.7 | 4.4.8 | 4.4.9 | 4.4.10 | 4.4.12 | 4.4.13 | 4.4.13.1 | 4.4.14.1 | 4.4.15 | 4.4.15.1 | 4.4.15.2 | 4.4.15.3 | 4.4.15.4 | 4.4.15.5 | 4.4.15.6
Ubuntu1 product
- phpmyadminAll versions (No fix recorded)
4 vendors · 5 products
References
13 links- github.com/phpmyadmin/phpmyadmin/commit/96e0aa35653ec0c66084a7e9343465e16c1f769bX Refsource CONFIRMPatch
- github.com/phpmyadmin/phpmyadmin/commit/cd229d718e8cb4bc8ba32446beaa82d27727b6f0X Refsource CONFIRMPatch
- github.com/phpmyadmin/phpmyadmin/commit/331c560fbfa0e7d2dce674b5e88e983c5f2a451dX Refsource CONFIRMPatch
- github.com/phpmyadmin/phpmyadmin/commit/b0180f18c828706af3a6800f0fb01a536d3ef8c7X Refsource CONFIRMPatch
- github.com/phpmyadmin/phpmyadmin/commit/27664605b945b13e1d2b71adea822ace2099cc96X Refsource CONFIRMPatch