{"id":"CVE-2016-5098","details":"Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.","modified":"2026-07-08T05:48:27.044131834Z","published":"2016-07-05T01:59:06.677Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"13.1"},{"last_affected":"13.1"}],"source":"CPE_STRING","vendor_product":"opensuse:opensuse"}]},"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html"},{"type":"WEB","url":"http://www.securitytracker.com/id/1035980"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201701-32"},{"type":"FIX","url":"https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8"},{"type":"FIX","url":"https://www.phpmyadmin.net/security/PMASA-2016-15"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/phpmyadmin/phpmyadmin","events":[{"introduced":"35e191d74b50c8f5a7b87fa9889869cc3a88255d"},{"last_affected":"35e191d74b50c8f5a7b87fa9889869cc3a88255d"},{"fixed":"d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8"}],"database_specific":{"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.6.2"},{"last_affected":"4.6.2"}]}}],"versions":["4.6.2","RELEASE_4_6_2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5098.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}