CVE-2011-3646

phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js_frame parameter to phpmyadmin.css.php, which reveals the installation path in an error message.

• CWE-20

• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069234.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069235.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html
• http://secunia.com/advisories/46874Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:158
• http://www.phpmyadmin.net/home_page/security/PMASA-2011-15.phpPatch, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069234.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069235.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html
• http://secunia.com/advisories/46874Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:158
• http://www.phpmyadmin.net/home_page/security/PMASA-2011-15.phpPatch, Vendor Advisory

Published

Nov 17, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3637The m_stop function in fs/proc/task_mmu.c in the Linux kerne…5.5
• CVE-2011-3638fs/ext4/extents.c in the Linux kernel before 3.0 does not ma…
• CVE-2011-3639The mod_proxy module in the Apache HTTP Server 2.0.x through…
• CVE-2011-3640Untrusted search path vulnerability in Mozilla Network Secur…
• CVE-2011-3642Cross-site scripting (XSS) vulnerability in Flowplayer Flash…9.6
• CVE-2011-3645Newgen OmniDocs allows remote attackers to bypass intended a…
• CVE-2011-3647The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and T…
• CVE-2011-3648Cross-site scripting (XSS) vulnerability in Mozilla Firefox …
• CVE-2011-3649Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (…
• CVE-2011-3650Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunde…
• CVE-2011-3651Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2011-3652The browser engine in Mozilla Firefox before 8.0 and Thunder…