NVD

Id
9284  
Name
CVE-2011-2508  
Description
Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-07-14  
Modified Date
2011-10-25  
Seq
2011-2508  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53108 9284 CVE-2011-2508 http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html  View
53109 9284 CVE-2011-2508 FEDORA-2011-9144  View
53110 9284 CVE-2011-2508 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=b434320eff8ca9c2fc1b043c1804f868341af9a7  View
53111 9284 CVE-2011-2508 8306  View
53112 9284 CVE-2011-2508 http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/  View
53113 9284 CVE-2011-2508 DSA-2286  View
53114 9284 CVE-2011-2508 MDVSA-2011:124  View
53115 9284 CVE-2011-2508 [oss-security] 20110628 CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
53116 9284 CVE-2011-2508 [oss-security] 20110628 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
53117 9284 CVE-2011-2508 [oss-security] 20110628 Re: [Phpmyadmin-security] CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
53118 9284 CVE-2011-2508 [oss-security] 20110629 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
53119 9284 CVE-2011-2508 http://www.phpmyadmin.net/home_page/security/PMASA-2011-8.php  View
53120 9284 CVE-2011-2508 20110707 phpMyAdmin 3.x Multiple Remote Code Executions  View
53121 9284 CVE-2011-2508 http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34482 JVNDB-2011-004724 phpMyAdmin の libraries/display_tbl.lib.php におけるディレクトリトラバーサルの脆弱性 phpMyAdmin の libraries/display_tbl.lib.php には、特定の MIME 変換機能が有効な際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-2508 50415 CVE-2011-2508 9284 6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004724.html 2011-07-02 2012-03-27 View