CVE

Id
76260  
CVE No.
CVE-2014-8959  
Status
Candidate  
Description
Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter.  
Phase
Assigned (20141118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
703120 76260 CVE-2014-8959 CONFIRM:http://www.phpmyadmin.net/home_page/security/PMASA-2014-14.php  View
703121 76260 CVE-2014-8959 CONFIRM:https://github.com/phpmyadmin/phpmyadmin/commit/80cd40b6687a6717860d345d6eb55bef2908e961  View
703122 76260 CVE-2014-8959 GENTOO:GLSA-201505-03  View
703123 76260 CVE-2014-8959 URL:https://security.gentoo.org/glsa/201505-03  View
703124 76260 CVE-2014-8959 MANDRIVA:MDVSA-2014:228  View
703125 76260 CVE-2014-8959 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2014:228  View
703126 76260 CVE-2014-8959 SUSE:openSUSE-SU-2014:1561  View
703127 76260 CVE-2014-8959 URL:http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html  View
703128 76260 CVE-2014-8959 BID:71247  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18341 JVNDB-2014-007216 Microsoft Internet Explorer における任意のコードを実行される脆弱性 Microsoft Internet Explorer には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2014-8967 76260 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007216.html  View