CVE-2008-1924
EUVD-2008-192423.04.2008, 16:05
Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| phpmyadmin | phpmyadmin | 𝑥 ≤ 2.11.5.1 |
| phpmyadmin | phpmyadmin | 2.10.0 |
| phpmyadmin | phpmyadmin | 2.10.0.1 |
| phpmyadmin | phpmyadmin | 2.10.0.2 |
| phpmyadmin | phpmyadmin | 2.10.1 |
| phpmyadmin | phpmyadmin | 2.10.2 |
| phpmyadmin | phpmyadmin | 2.10.3 |
| phpmyadmin | phpmyadmin | 2.10.3rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.0 |
| phpmyadmin | phpmyadmin | 2.11.0beta1:beta1 |
| phpmyadmin | phpmyadmin | 2.11.0rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.1 |
| phpmyadmin | phpmyadmin | 2.11.1.1 |
| phpmyadmin | phpmyadmin | 2.11.1.2 |
| phpmyadmin | phpmyadmin | 2.11.1rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.2 |
| phpmyadmin | phpmyadmin | 2.11.2.1 |
| phpmyadmin | phpmyadmin | 2.11.2.2 |
| phpmyadmin | phpmyadmin | 2.11.3 |
| phpmyadmin | phpmyadmin | 2.11.3rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.4 |
| phpmyadmin | phpmyadmin | 2.11.4rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.5 |
| phpmyadmin | phpmyadmin | 2.11.6rc1:rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References