phpMyAdmin contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker requests the "pdf_pages.php" script without any arguments, which will disclose the web server path resulting in a loss of confidentiality.
Remote / Network Access
Loss of Confidentiality
Upgrade to version 2.5.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.