[MEDIUM] phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file

PKSA-4dz8-8xp5-bpxg CVE-2011-0986 GHSA-wcmm-28rg-mg3r

Affected package: phpmyadmin/phpmyadmin

Affected version: >=3.3.0,<3.3.9.1|>=2.11.0,<2.11.11.2

Reported by:
GitHub