Security Advisory
CVE-2010-4481
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.