CVE

Id
14506  
CVE No.
CVE-2005-3300  
Status
Candidate  
Description
The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme.  
Phase
Assigned (20051023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
109513 14506 CVE-2005-3300 BUGTRAQ:20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability  View
109514 14506 CVE-2005-3300 URL:http://marc.info/?l=bugtraq&m=113017591414699&w=2  View
109515 14506 CVE-2005-3300 FULLDISC:20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability  View
109516 14506 CVE-2005-3300 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478.  View
109517 14506 CVE-2005-3300 MISC:http://www.hardened-php.net/advisory_162005.73.html  View
109518 14506 CVE-2005-3300 CONFIRM:http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5  View
109519 14506 CVE-2005-3300 DEBIAN:DSA-880  View
109520 14506 CVE-2005-3300 URL:http://www.debian.org/security/2005/dsa-880  View
109521 14506 CVE-2005-3300 GENTOO:GLSA-200510-21  View
109522 14506 CVE-2005-3300 URL:http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml  View
109523 14506 CVE-2005-3300 SUSE:SUSE-SR:2005:028  View
109524 14506 CVE-2005-3300 URL:http://www.novell.com/linux/security/advisories/2005_28_sr.html  View
109525 14506 CVE-2005-3300 SUSE:SUSE-SR:2005:026  View
109526 14506 CVE-2005-3300 SUSE:SUSE-SA:2005:066  View
109527 14506 CVE-2005-3300 URL:http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html  View
109528 14506 CVE-2005-3300 BID:15169  View
109529 14506 CVE-2005-3300 URL:http://www.securityfocus.com/bid/15169  View
109530 14506 CVE-2005-3300 SECTRACK:1015091  View
109531 14506 CVE-2005-3300 URL:http://securitytracker.com/id?1015091  View
109532 14506 CVE-2005-3300 SECUNIA:17289  View
109533 14506 CVE-2005-3300 URL:http://secunia.com/advisories/17289/  View
109534 14506 CVE-2005-3300 SECUNIA:17337  View
109535 14506 CVE-2005-3300 URL:http://secunia.com/advisories/17337  View
109536 14506 CVE-2005-3300 SECUNIA:17559  View
109537 14506 CVE-2005-3300 URL:http://secunia.com/advisories/17559  View
109538 14506 CVE-2005-3300 SECUNIA:17607  View
109539 14506 CVE-2005-3300 URL:http://secunia.com/advisories/17607  View
109540 14506 CVE-2005-3300 XF:phpmyadmin-multiple-scripts-file-include(22835)  View

Related JVN