Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40494?format=api",
    "vulnerability_id": "VCID-52xs-45kd-w3hz",
    "summary": "Information Exposure\nAn attacker can exploit phpMyAdm to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has access. An attacker must have valid credentials to log in to phpMyAdmin; this vulnerability does not allow an attacker to circumvent the login system.",
    "aliases": [
        {
            "alias": "CVE-2018-19968"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/57122?format=api",
            "purl": "pkg:composer/phpmyadmin/phpmyadmin@4.8.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-ajf6-bk2g-wkb7"
                },
                {
                    "vulnerability": "VCID-bd83-vf81-sfa4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmyadmin/phpmyadmin@4.8.4"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/52532?format=api",
            "purl": "pkg:composer/phpmyadmin/phpmyadmin@4.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1hvw-4h4d-zkhv"
                },
                {
                    "vulnerability": "VCID-23dq-w66r-k3bt"
                },
                {
                    "vulnerability": "VCID-2vqn-z4en-duh4"
                },
                {
                    "vulnerability": "VCID-38tp-acy8-57hj"
                },
                {
                    "vulnerability": "VCID-3va7-xx14-gkds"
                },
                {
                    "vulnerability": "VCID-44uc-xrvp-7bet"
                },
                {
                    "vulnerability": "VCID-4avx-e9mf-2yb1"
                },
                {
                    "vulnerability": "VCID-4kax-4bpz-g7c5"
                },
                {
                    "vulnerability": "VCID-4vgu-cagj-hfhb"
                },
                {
                    "vulnerability": "VCID-4wn2-pnbv-sked"
                },
                {
                    "vulnerability": "VCID-52xs-45kd-w3hz"
                },
                {
                    "vulnerability": "VCID-ajf6-bk2g-wkb7"
                },
                {
                    "vulnerability": "VCID-amgy-teas-euh5"
                },
                {
                    "vulnerability": "VCID-btc1-yng3-ckhx"
                },
                {
                    "vulnerability": "VCID-cbjd-e3sk-m7bu"
                },
                {
                    "vulnerability": "VCID-gmjk-222y-abda"
                },
                {
                    "vulnerability": "VCID-gtps-py3z-13cu"
                },
                {
                    "vulnerability": "VCID-jmn8-a5r9-2qc8"
                },
                {
                    "vulnerability": "VCID-k5ph-wws1-fqg4"
                },
                {
                    "vulnerability": "VCID-mgu4-pf1x-r3dy"
                },
                {
                    "vulnerability": "VCID-n66y-s36g-fqck"
                },
                {
                    "vulnerability": "VCID-n7cc-xfym-u7g4"
                },
                {
                    "vulnerability": "VCID-nuju-ekmt-k7g9"
                },
                {
                    "vulnerability": "VCID-nv3j-xj42-wfcw"
                },
                {
                    "vulnerability": "VCID-q45d-5bf4-tff5"
                },
                {
                    "vulnerability": "VCID-q7pe-bvr1-g3bc"
                },
                {
                    "vulnerability": "VCID-qqyb-zags-bbhz"
                },
                {
                    "vulnerability": "VCID-r9sb-489v-fqc9"
                },
                {
                    "vulnerability": "VCID-rz6q-hthe-1uer"
                },
                {
                    "vulnerability": "VCID-tvfz-v881-sufp"
                },
                {
                    "vulnerability": "VCID-txba-1at4-ekg2"
                },
                {
                    "vulnerability": "VCID-xqf5-yxf3-u3he"
                },
                {
                    "vulnerability": "VCID-zvcj-g6rt-s3de"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmyadmin/phpmyadmin@4.0.0"
        }
    ],
    "references": [
        {
            "reference_url": "https://www.phpmyadmin.net/security/PMASA-2018-6/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://www.phpmyadmin.net/security/PMASA-2018-6/"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/106178",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/bid/106178"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19968",
            "reference_id": "CVE-2018-19968",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19968"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 200,
            "name": "Exposure of Sensitive Information to an Unauthorized Actor",
            "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        }
    ],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-52xs-45kd-w3hz"
}