CVE-2008-1924

Опубликовано: 23 апр. 2008

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
http://secunia.com/advisories/29944
Vendor Advisory
http://secunia.com/advisories/29964
Vendor Advisory
http://secunia.com/advisories/30034
Vendor Advisory
http://secunia.com/advisories/30816
Vendor Advisory
http://secunia.com/advisories/32834
Vendor Advisory
http://secunia.com/advisories/33822
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200805-02.xml
http://www.debian.org/security/2008/dsa-1557
http://www.mandriva.com/security/advisories?name=MDVSA-2008:131
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-3
Vendor Advisory
http://www.securityfocus.com/bid/28906
Patch
http://www.vupen.com/english/advisories/2008/1328/references
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41964
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
http://secunia.com/advisories/29944
Vendor Advisory
http://secunia.com/advisories/29964
Vendor Advisory
http://secunia.com/advisories/30034
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*

Версия до 2.11.5.1 (включая)

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00175

Низкий

3.5 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2008-1924

ubuntu

около 17 лет назад

CVE-2008-1924

debian

около 17 лет назад

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running ...

GHSA-pfxq-3wfw-4c7m

github

около 3 лет назад

EPSS

Процентиль: 40%

0.00175

Низкий

3.5 Low

CVSS2

Дефекты

CWE-200