Back to search
CVE-2011-2508
Published: Jul 14, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[oss-security] 20110628 CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/
x_refsource_CONFIRM
http://www.phpmyadmin.net/home_page/security/PMASA-2011-8.php
x_refsource_CONFIRM
45292
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20110628 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
[oss-security] 20110628 Re: [Phpmyadmin-security] CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
73614
vdb-entry
x_refsource_OSVDB
MDVSA-2011:124
vendor-advisory
x_refsource_MANDRIVA
8306
third-party-advisory
x_refsource_SREASON
45139
third-party-advisory
x_refsource_SECUNIA
DSA-2286
vendor-advisory
x_refsource_DEBIAN
20110707 phpMyAdmin 3.x Multiple Remote Code Executions
mailing-list
x_refsource_BUGTRAQ
[oss-security] 20110629 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
45315
third-party-advisory
x_refsource_SECUNIA
FEDORA-2011-9144
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now