CVE-2005-3299

Опубликовано: 23 окт. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.

Ссылки

http://secunia.com/advisories/17137
Patch
Vendor Advisory
http://securityreason.com/securityalert/69
http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml
Patch
Vendor Advisory
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15053
http://secunia.com/advisories/17137
Patch
Vendor Advisory
http://securityreason.com/securityalert/69
http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml
Patch
Vendor Advisory
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15053

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.07974

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-3299

ubuntu

больше 19 лет назад

CVE-2005-3299

debian

больше 19 лет назад

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin ...

GHSA-xq8v-3x6g-9vpm

github

около 3 лет назад

EPSS

Процентиль: 92%

0.07974

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other